Senior Data Security Engineer

Lead the evolution of enterprise data protection from tool administration to an engineering-driven security capability Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, collaboration platforms, network, and web channels Modernise DLP policy deployment through version-controlled, automated, repeatable policy-as-code workflows Build CI/CD pipelines for data protection policy lifecycle management, including review, validation, testing, approval, deployment, and rollback Develop reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards Automate policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and health checks Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms Tune detection logic to reduce false positives and improve policy-enforcement signal quality Design sensitive-data usage guardrails across Microsoft 365

cloud platforms, repositories, collaboration tools, SaaS applications, and endpoints Partner with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams Investigate data protection events, identify root causes, recommend control improvements, and create automated prevention patterns Define and maintain metrics, KPIs, dashboards, and control evidence Support platform upgrades, capability expansions, vendor integrations, and new data protection control patterns Requirements Legal right to work in the UK; Allstate is not providing sponsorship Minimum 4 years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within complex organisations Proven experience with Policy-as-Code, Security-as-Code, and DevSecOps methodologies Ability to automate security control deployment and governance at enterprise scale Experience replacing manual processes through automation, APIs, Infrastructure-as-Code, and platform engineering Advanced knowledge of Data Loss Prevention, data classification, information protection, and data governance Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and Microsoft 365 security Understanding of cloud, SaaS, CASB, and enterprise data protection architectures Proficiency in PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or comparable tools Experience modernising Data Protection, DLP, CASB, or Information Protection programs Ability to implement and scale DevOps, DevSecOps, or Platform Engineering practices within security organisations Track record leading large-scale security initiatives with measurable risk reduction Experience supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience is desirable Core Competencies Demonstrates expertise in Data Loss Prevention, Policy-as-Code, and Security-as-Code methodologies, with a strong focus on automating security control deployment and governance at enterprise scale. Proficient in integrating cloud security solutions and leading large-scale security initiatives to enhance data protection capabilities. Highest-signal resume keywords Data Loss Prevention Policy-as-Code Security-as-Code DevSecOps Microsoft 365 Security ATS Optimization Keywords Hard Skills Data Protection Information Protection Cloud Security Automation PowerShell Python REST APIs Terraform Bicep YAML Certifications & Qualifications Bachelor’s Degree in Cybersecurity Bachelor’s Degree in Information Systems Bachelor’s Degree in Computer Science Bachelor’s Degree in Engineering Industry Keywords Data Governance Cloud Architecture SaaS Enterprise Data Protection Compliance Tools & Technologies Microsoft Purview Microsoft Information Protection Defender for Cloud Apps CASB SIEM SOAR #J-18808-Ljbffr