Senior Data Protection Engineer (DevSecOps Lead)

Allstate Insurance Company; Belfast City District; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Corporate bonus scheme

Pension scheme

Annual performance-related pay reviews

Life assurance and income protection

Flexible working options

Hybrid working

Private medical and dental insurance

Employee assistance programme

Discounted gym membership

Two paid volunteering days

Job summary

Allstate NI, the Belfast-based European Digital Centre of Excellence, seeks a Senior Data Protection Security Engineer to lead engineering-driven data protection initiatives. You will design scalable, automated DLP solutions across endpoints, email, cloud services, and collaboration tools, using policy-as-code and DevSecOps practices.

The role requires delivering modernisation of Data Protection programs, reducing manual processes, and enabling governance with repeatable deployment models.

Qualifications

• 4+ years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities.
• Proven automation of security control deployment and governance at enterprise scale.
• Experience modernising Data Protection programs through automation and engineering-driven models.

Responsibilities

• Engineer enterprise DLP controls across endpoints, email, SaaS, cloud, and collaboration platforms.
• Move policy deployment to version-controlled, automated, policy-as-code workflows.
• Build CI/CD pipelines for data protection policy lifecycle management with review, testing, deployment, and rollback.
• Develop reusable policy templates, detection logic, and deployment standards across DLP/CASB platforms.
• Automate tasks like policy promotion, drift detection, control validation, and health checks.
• Integrate DLP/CASB/data classification with cloud security, identity, SIEM, SOAR to improve visibility and response.
• Tune detection logic to reduce false positives and improve policy enforcement.
• Design guardrails for sensitive data usage across Microsoft 365 and cloud environments.
• Partner with engineering, compliance, privacy, legal, and business teams on practical data protection solutions.
• Investigate events, identify root causes, and convert lessons into automated prevention patterns.
• Define metrics, dashboards, and evidence showing risk reduction and deployment quality.

Skills

Policy-as-Code

Security-as-Code

DevSecOps

Automation

DLP

Data Classification

M365 Security

IaC

Cloud Security

Platform Engineering

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience

Tools

PowerShell

Python

REST APIs

Terraform

Bicep

YAML

JSON

Microsoft Purview

Microsoft Information Protection

Defender for Cloud Apps

Job description

Allstate NI, the Belfast-based European Digital Centre of Excellence, seeks a Senior Data Protection Security Engineer to lead engineering-driven data protection initiatives. You will design scalable, automated DLP solutions across endpoints, email, cloud services, and collaboration tools, using policy-as-code and DevSecOps practices.

The role requires delivering modernisation of Data Protection programs, reducing manual processes, and enabling governance with repeatable deployment models.