> Markdown version of [/jobs/ext/2140482-data-security-engineer](https://www.wearedevelopers.com/jobs/ext/2140482-data-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Data Security Engineer - **Company:** Allstate's European Digital Centre Of Excellence - **Location:** Belfast, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Storage, Collaborative Software, Cyber Security, Information Systems, Data Governance, Information Leak Prevention, Data Loss, Data Security, DevOps, IT Management, JSON, Python (Programming Language), Windows PowerShell, Data Driven Tests, Security Information and Event Management, Software Engineering, YAML, Enterprise Data Management, Policy as Code, Data Classification, Usage Tracking, Information Technology, Bicep, Restful APIs, Terraform, Devsecops - **Published:** August 20, 2026 - **Apply:** https://www.careerjet.co.uk/job/gb960883f600be09682201eaef2768627b/eaa ## About the Role All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy. A minimum of 4 years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within complex organisations. Proven experience in Policy-as-Code, Security-as-Code, and DevSecOps methodologies, with a demonstrated ability to automate security control deployment and governance at enterprise scale. Track record of replacing manual operational processes with engineering-driven solutions through automation, APIs, Infrastructure-as-Code, and platform engineering practices. Advanced knowledge of Data Loss Prevention (DLP), data classification, information protection, and data governance principles. Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and the Microsoft 365 security ecosystem. Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures. Proficiency in scripting and automation technologies including PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or comparable tools. Demonstrated success in modernising Data Protection, DLP, CASB, or Information Protection programs through automation, standardization, and engineering-driven operating models. Proven ability to implement and scale DevOps, DevSecOps, or Platform Engineering practices within security organisations. Track record of leading large-scale security initiatives that improve control effectiveness, operational efficiency, and measurable risk reduction. Background supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments. Desirable Skills: Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience. Knowledge of regulatory, privacy, and compliance requirements and their implementation through scalable technical controls. #LI-TR3 #LI-Hybrid Skills Cybersecurity, Cyber Security, Data Leakage Prevention Operations, Data Loss Prevention (DLP), Data Loss Prevention (DLP) Operations and Management, Data Loss Protection, Data Security, GRC Platform, GRC Software, IT Governance Risk and Compliance (GRC), Software Development ## Description Your role in the team The Senior Data Protection Security Engineer will lead the evolution of enterprise data protection from a traditional tool administration model to an engineering-driven security capability. This role is responsible for building scalable, automated, and measurable data protection solutions across cloud, SaaS, endpoint, email, and collaboration environments using Policy-as-Code, Security-as-Code, DevOps, and DevSecOps practices. The successful candidate will bring a proven track record of modernising Data Protection, DLP, CASB, or Information Protection programs by reducing manual processes, increasing automation, and implementing repeatable governance and deployment models. This individual will serve as a key contributor in advancing the organisation's data protection strategy while driving operational excellence, security effectiveness, and business enablement. For this opportunity, the business is flexible to hire at Senior Consultant, Lead Consultant, and Expert level depending on qualifications & interview evaluation., Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, collaboration platforms, network, and web channels. Modernise DLP policy deployment by moving from manual console-based changes to version-controlled, automated, and repeatable policy-as-code workflows. Build CI/CD pipelines for data protection policy lifecycle management, including peer review, automated validation, testing, approval, deployment, and rollback. Develop reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards across multiple DLP and CASB platforms. Automate operational tasks such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and increase confidence in policy enforcement. Design guardrails for sensitive data usage across Microsoft 365, cloud platforms, source code repositories, collaboration tools, SaaS applications, and enterprise endpoints. Partner with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams to design practical data protection solutions. Investigate data protection events, identify root cause, recommend control improvements, and convert lessons learned into automated prevention patterns. Define and maintain metrics, KPIs, dashboards, and control evidence that demonstrate risk reduction, policy effectiveness, deployment quality, and operational maturity. Support platform upgrades, capability expansions, vendor integrations, and new data protection control patterns using disciplined engineering practices. ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)