Senior Data Protection Engineer: Automate & Secure DLP

Allstate; United States; On-site; USD 91,000 - 190,000; Full time

Job summary

Allstate is seeking a Senior Data Protection Security Engineer to drive enterprise data protection modernization. You will build scalable, automated DLP and information-protection solutions across cloud, SaaS, and endpoints using DevSecOps practices.

You will lead policy-as-code workflows, CI/CD pipelines, and governance, partnering with cross-functional teams to reduce manual work and strengthen security effectiveness.

Qualifications

• 4+ years delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities within complex organizations.
• Proven experience in Policy-as-Code, Security-as-Code, and DevSecOps methodologies, with automation at enterprise scale.
• Track record of replacing manual processes with engineering-driven automation and governance.

Responsibilities

• Engineer enterprise DLP controls across endpoints, email, SaaS, cloud storage, and collaboration platforms.
• Modernize DLP policy deployment with policy-as-code workflows and automation.
• Build CI/CD pipelines for DLP policy lifecycle management with peer review, testing, and deployment.
• Develop reusable policy templates, detection logic, and deployment standards across DLP and CASB platforms.
• Automate tasks like policy promotion, drift detection, control validation, reporting, and health checks.
• Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility and enforcement.
• Tune detection logic to reduce false positives and improve policy enforcement.
• Design guardrails for sensitive data usage across Microsoft 365, cloud platforms, code repositories, and enterprise endpoints.
• Partner with engineering, cloud, infrastructure, compliance, privacy, and legal teams on practical data protection solutions.
• Investigate data protection events, identify root cause, and convert lessons learned into automated prevention patterns.
• Define and maintain KPIs, dashboards, and control evidence demonstrating risk reduction and deployment quality.

Skills

API

Cloud Security

Cybersecurity

Data Governance

DLP

Data Protection

Data Security

DevSecOps

Information Security

IT Automation

IaC

Security Architecture

Security Operations

Microsoft 365 Security

Microsoft Defender

Scripting

Secure Coding

SaaS

Job description

Allstate is seeking a Senior Data Protection Security Engineer to drive enterprise data protection modernization. You will build scalable, automated DLP and information-protection solutions across cloud, SaaS, and endpoints using DevSecOps practices.

You will lead policy-as-code workflows, CI/CD pipelines, and governance, partnering with cross-functional teams to reduce manual work and strengthen security effectiveness.