Senior Data Security Engineer

• Lead the evolution of enterprise data protection from tool administration to an engineering-driven security capability
• Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, collaboration platforms, network, and web channels
• Modernise DLP policy deployment through version-controlled, automated, repeatable policy-as-code workflows
• Build CI/CD pipelines for data protection policy lifecycle management, including review, validation, testing, approval, deployment, and rollback
• Develop reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards
• Automate policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and health checks
• Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms
• Tune detection logic to reduce false positives and improve policy-enforcement signal quality
• Design sensitive-data usage guardrails across Microsoft 365, cloud platforms, repositories, collaboration tools, SaaS applications, and endpoints
• Partner with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams
• Investigate data protection events, identify root causes, recommend control improvements, and create automated prevention patterns
• Define and maintain metrics, KPIs, dashboards, and control evidence
• Support platform upgrades, capability expansions, vendor integrations, and new data protection control patterns

Requirements

• Legal right to work in the UK; Allstate is not providing sponsorship
• Minimum 4 years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within complex organisations
• Proven experience with Policy-as-Code, Security-as-Code, and DevSecOps methodologies
• Ability to automate security control deployment and governance at enterprise scale
• Experience replacing manual processes through automation, APIs, Infrastructure-as-Code, and platform engineering
• Advanced knowledge of Data Loss Prevention, data classification, information protection, and data governance
• Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and Microsoft 365 security
• Understanding of cloud, SaaS, CASB, and enterprise data protection architectures
• Proficiency in PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or comparable tools
• Experience modernising Data Protection, DLP, CASB, or Information Protection programs
• Ability to implement and scale DevOps, DevSecOps, or Platform Engineering practices within security organisations
• Track record leading large-scale security initiatives with measurable risk reduction
• Experience supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience is desirable

Core Competencies

Demonstrates expertise in Data Loss Prevention, Policy-as-Code, and Security-as-Code methodologies, with a strong focus on automating security control deployment and governance at enterprise scale. Proficient in integrating cloud security solutions and leading large-scale security initiatives to enhance data protection capabilities.

Highest-signal resume keywords

• Data Loss Prevention
• Policy-as-Code
• Security-as-Code
• DevSecOps
• Microsoft 365 Security

ATS Optimization Keywords

Hard Skills

• Data Protection
• Information Protection
• Cloud Security
• Automation
• PowerShell
• Python
• REST APIs
• Terraform
• Bicep
• YAML

Certifications & Qualifications

• Bachelor's Degree in Cybersecurity
• Bachelor's Degree in Information Systems
• Bachelor's Degree in Computer Science
• Bachelor's Degree in Engineering

Industry Keywords

• Data Governance
• Cloud Architecture
• SaaS
• Enterprise Data Protection
• Compliance

Tools & Technologies

• Microsoft Purview
• Microsoft Information Protection
• Defender for Cloud Apps
• CASB
• SIEM
• SOAR