Senior Data Security Engineer

Jobtailor

Belfast City District

On-site

GBP 80,000 - 120,000

Full time

9 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor is seeking an experienced Senior Data Protection Engineer to lead the evolution of enterprise data protection. You will build and automate DLP controls across endpoints, SaaS, and cloud, modernize policy deployment, and drive policy lifecycle through CI/CD pipelines.

You will collaborate with engineering, cloud, and security teams, implementing policy-as-code and automation to reduce risk and scale data protection across enterprise environments.

Qualifications

Minimum 4 years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering in complex organisations.
Experience with Policy-as-Code, Security-as-Code, and DevSecOps methodologies.
Ability to automate security control deployment and governance at enterprise scale.
Experience replacing manual processes through automation, APIs, IaC, and platform engineering.
Strong knowledge of data loss prevention, data classification, information protection, and data governance.
Hands-on with Microsoft Purview, MIP, Defender for Cloud Apps, and Microsoft 365 security.
Understanding of cloud/SaaS/CASB/enterprise data protection architectures.
Able to implement and scale DevOps/DevSecOps/platform engineering in security teams.
Proven track record leading large-scale security initiatives with measurable risk reduction.
Experience supporting enterprise-scale cloud/SaaS/M365 environments.
Bachelor’s in relevant fields desirable.

Responsibilities

Lead evolution of enterprise data protection from tool admin to engineering-driven security capability.
Develop enterprise DLP controls across endpoint, email, SaaS, cloud, networks, and web.
Modernize DLP policy deployment with policy-as-code workflows.
Build CI/CD pipelines for data protection policy lifecycle management.

Skills

Data protection

Information protection

Cloud security

Automation

PowerShell

Python

REST APIs

Terraform

Bicep

YAML

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Systems

Bachelor's degree in Computer Science

Bachelor's degree in Engineering

Tools

Microsoft Purview

Microsoft Information Protection

Defender for Cloud Apps

CASB

SIEM

SOAR

Job description

Lead the evolution of enterprise data protection from tool administration to an engineering-driven security capability
Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, collaboration platforms, network, and web channels
Modernise DLP policy deployment through version-controlled, automated, repeatable policy-as-code workflows
Build CI/CD pipelines for data protection policy lifecycle management, including review, validation, testing, approval, deployment, and rollback
Develop reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards
Automate policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and health checks
Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms
Tune detection logic to reduce false positives and improve policy-enforcement signal quality
Design sensitive-data usage guardrails across Microsoft 365, cloud platforms, repositories, collaboration tools, SaaS applications, and endpoints
Partner with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams
Investigate data protection events, identify root causes, recommend control improvements, and create automated prevention patterns
Define and maintain metrics, KPIs, dashboards, and control evidence
Support platform upgrades, capability expansions, vendor integrations, and new data protection control patterns

Requirements

Legal right to work in the UK; Allstate is not providing sponsorship
Minimum 4 years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within complex organisations
Proven experience with Policy-as-Code, Security-as-Code, and DevSecOps methodologies
Ability to automate security control deployment and governance at enterprise scale
Experience replacing manual processes through automation, APIs, Infrastructure-as-Code, and platform engineering
Advanced knowledge of Data Loss Prevention, data classification, information protection, and data governance
Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and Microsoft 365 security
Understanding of cloud, SaaS, CASB, and enterprise data protection architectures
Proficiency in PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or comparable tools
Experience modernising Data Protection, DLP, CASB, or Information Protection programs
Ability to implement and scale DevOps, DevSecOps, or Platform Engineering practices within security organisations
Track record leading large-scale security initiatives with measurable risk reduction
Experience supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience is desirable

Core Competencies

Demonstrates expertise in Data Loss Prevention, Policy-as-Code, and Security-as-Code methodologies, with a strong focus on automating security control deployment and governance at enterprise scale. Proficient in integrating cloud security solutions and leading large-scale security initiatives to enhance data protection capabilities.

Highest-signal resume keywords