Software Engineer - GDPR/CCPA (Europe)

Our client is a fast-growing B2B SaaS company hiring a backend engineer to own its data deletion and suppression pipeline — the system that handles privacy requests end to end, from any channel, at scale. Your first major milestone: building and shipping a new system to handle DROP (California privacy deletion requests). Beyond that, you'll own compliance tooling for GDPR, CCPA, and whatever regulations come next. This is not a role where "move fast and break things" applies. A mistake in a regular feature means a bug in production; a mistake here can mean a lawsuit. We're looking for someone who takes correctness seriously and treats this responsibility with the weight it deserves. What You'll Do - Own the privacy request pipeline end to end: data deletion, suppression, and audit across all channels - Design compliance workflows that scale with evolving regulations (GDPR, CCPA, and future frameworks) - Work with large, business-critical databases containing high volumes of records - Write thoroughly tested, verifiable code — testing discipline is a core part of this job, not an afterthought What We're Looking For Must have: - 5 years of backend engineering experience with Node.js and Python - At least 2 years of experience working with Data Privacy work (GDPR, CCPA) - Hands-on experience with NoSQL databases (e.g., MongoDB, Elasticsearch) - Comfort working with data at scale — large databases with high record counts - A correctness-first mindset: careful, rigorous, and serious about getting things right the first time - Strong testing habits — you verify your work before it ships Nice to have: - Elasticsearch experience specifically (deep indexing expertise not required — you can learn the specifics on the job if you know NoSQL fundamentals) - Some data engineering exposure - Prior experience with privacy/compliance systems (GDPR, CCPA, data subject requests) Not required: - Frontend or accessibility work — this role is purely about the data side of privacy compliance (deletion pipelines, suppression, cookies/consent data), not UI Why This Role Matters Privacy regulation is only expanding, and this system sits directly in the path of legal risk. It's a role with clear ownership, real stakes, and visible impact — and a well-scoped technical domain where doing careful, high-quality work is genuinely valued over raw speed. We offer - Remote within Europe. - Small, autonomous team — no micromanagement. - Competitive B2B compensation. Originally posted on Himalayas