Senior Data Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the transformation of enterprise data protection from conventional tool management to a security capability driven by engineering.

• Design and implement enterprise DLP controls across various channels, including endpoints, email, SaaS, cloud storage, collaboration platforms, networks, and the web.

• Enhance DLP policy deployment through the use of version-controlled, automated, and repeatable Policy-as-Code workflows.

• Construct CI/CD pipelines for managing the data protection policy lifecycle, covering peer review, validation, testing, approval, deployment, and rollback.

• Create reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards across DLP and CASB platforms.

• Automate the promotion of policies, detection of configuration drift, validation of controls, reporting, alert enrichment, and regular health assessments.

• Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms.

• Refine detection logic to minimize false positives, enhance signal quality, and boost confidence in policy enforcement.

• Establish sensitive data usage guidelines across Microsoft 365, cloud platforms, source code repositories, collaboration tools, SaaS applications, and enterprise endpoints.

• Collaborate with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams.

• Examine data protection incidents, pinpoint root causes, propose control enhancements, and develop automated prevention patterns.

• Define and uphold metrics, KPIs, dashboards, and control evidence that demonstrate risk mitigation and operational maturity.

• Assist with platform upgrades, capability expansions, vendor integrations, and the introduction of new data protection control patterns.

• Operate at a Senior Consultant, Lead Consultant, or Expert level based on qualifications and interview assessment.

⛳️ Requirements

• Minimum of 4 years in delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within intricate organizations.

• Proven expertise in Policy-as-Code, Security-as-Code, and DevSecOps practices.

• Established ability to automate security control deployment and governance on an enterprise scale.

• History of replacing manual operational processes with engineering-driven solutions through automation, APIs, Infrastructure-as-Code, and platform engineering methodologies.

• Advanced understanding of Data Loss Prevention (DLP), data classification, information protection, and data governance principles.

• Practical experience with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and the Microsoft 365 security ecosystem.

• In-depth knowledge of cloud, SaaS, CASB, and enterprise data protection architectures.

• Proficient in PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or equivalent tools.

• Proven success in modernizing Data Protection, DLP, CASB, or Information Protection programs through automation, standardization, and engineering-focused operational models.

• Demonstrated ability to implement and scale DevOps, DevSecOps, or Platform Engineering practices within security organizations.

• Experience leading large-scale security initiatives that enhance control effectiveness, operational efficiency, and measurable risk reduction.

• Background in supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments.

• Familiarity with regulatory, privacy, and compliance requirements and their execution through scalable technical controls.

• Willingness to undergo a background investigation.

• Allstate typically does not sponsor individuals for employment-based visas for this role.

• A dedicated, private workspace free from distractions is required when working remotely.

• Access to reliable internet with minimum speeds of 50 MB download and 5 MB upload is necessary.

🏝️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.

• Monthly connectivity reimbursement to help mitigate internet costs.

• Opportunity to support causes that are important to you.

• Dedicated, private workspace requirements for remote work.

• Reliable internet requirement with minimum speeds of 50 MB download and 5 MB upload.