Senior Data Protection Engineer-Policy-as-Code, DLP & CASB

CyberJobs.Com; Dungannon; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Corporate bonus scheme

Pension scheme

Annual performance-related pay reviews

Life assurance and income protection

Flexible working options

Hybrid working

Private medical and dental insurance

Employee assistance programme

Discounted gym membership

Two paid volunteering days each year

Cycle to work scheme

Job summary

Allstate NI seeks a Senior Data Protection Security Engineer to elevate enterprise data protection beyond traditional tools, building scalable, automated controls across cloud, SaaS, endpoint, email, and collaboration environments using Policy-as-Code and DevSecOps practices.

The role requires proven experience modernising DLP/CASB programs, automating governance, and deploying repeatable governance models. Hybrid working and senior consultant levels are available based on qualifications.

Qualifications

• UK work eligibility; Allstate sponsorship not available.
• 4+ years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering in large organisations.
• Experience with Policy-as-Code, Security-as-Code, and DevSecOps to automate security deployment at scale.
• Automation-focused track record replacing manual processes with engineering solutions via APIs, IaC, and automation pipelines.
• Strong knowledge of DLP, data classification, information protection, and data governance principles.
• Hands-on with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and Microsoft 365 security ecosystem.
• Solid understanding of cloud, SaaS, CASB, and enterprise data protection architectures.
• Scripting and automation: PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON.

Responsibilities

• Engineer enterprise DLP controls across endpoints, email, SaaS, cloud storage, and collaboration platforms.
• Modernise DLP policy deployment with version-controlled, automated policy-as-code workflows.
• Build CI/CD pipelines for policy lifecycle management, including peer review, testing, deployment, and rollback.
• Develop reusable policy templates, detection logic, and deployment standards across DLP/CASB platforms.
• Automate tasks: policy promotion, drift detection, control validation, reporting, and health checks.
• Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms.
• Tune detection logic to reduce false positives and improve policy enforcement.
• Design guardrails for sensitive data usage across Microsoft 365 and cloud environments.
• Collaborate with engineering, cloud, compliance, privacy, legal, and business teams on practical solutions.
• Investigate data protection events, identify root cause, and automate prevention patterns.
• Define metrics, KPIs, dashboards, and control evidence to demonstrate risk reduction and maturity.
• Support platform upgrades, vendor integrations, and new data protection control patterns.

Skills

Policy-as-Code

Security-as-Code

DevSecOps

Automation

PowerShell

Python

REST APIs

Terraform

YAML

JSON

Microsoft Purview

Microsoft Information Protection

Defender for Cloud Apps

M365 Security

DLP

CASB

Cloud Security

Data Protection

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience

Tools

CI/CD pipelines

Job description

Allstate NI seeks a Senior Data Protection Security Engineer to elevate enterprise data protection beyond traditional tools, building scalable, automated controls across cloud, SaaS, endpoint, email, and collaboration environments using Policy-as-Code and DevSecOps practices.

The role requires proven experience modernising DLP/CASB programs, automating governance, and deploying repeatable governance models. Hybrid working and senior consultant levels are available based on qualifications.