8 days ago
Belfast, United KingdomSenior
Responsibilities
- Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, collaboration, network, and web channels.
- Build version-controlled policy-as-code and CI/CD workflows for policy validation, approval, deployment, and rollback.
- Develop reusable policy templates, detection logic, exception patterns, configuration baselines, and deployment standards across DLP and CASB platforms.
- Automate policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks.
- Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms.
- Tune detection logic, investigate data protection events, and convert lessons learned into automated prevention patterns.
- Define metrics, KPIs, dashboards, and control evidence demonstrating risk reduction and operational maturity.
- Support platform upgrades, vendor integrations, capability expansions, and new data protection control patterns.
- Partner with engineering, cloud, infrastructure, network, compliance, privacy, legal, and business teams.
Requirements
- At least 4 years of experience delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities in complex organizations.
- Experience with Policy-as-Code, Security-as-Code, DevSecOps, automation, APIs, Infrastructure-as-Code, and platform engineering practices.
- Advanced knowledge of Data Loss Prevention, data classification, information protection, and data governance.
- Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and the Microsoft 365 security ecosystem.
- Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures.
- Proficiency with PowerShell, Python, REST APIs, Terraform, Bicep, YAML, JSON, or comparable tools.
- Experience modernizing Data Protection, DLP, CASB, or Information Protection programs through automation and engineering-driven operating models.
- Experience implementing and scaling DevOps, DevSecOps, or Platform Engineering practices within security organizations.
- Experience leading large-scale security initiatives and supporting enterprise-scale cloud, SaaS, or Microsoft 365 environments.
- Knowledge of regulatory, privacy, and compliance requirements and their implementation through scalable technical controls is desirable.
- A bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience is desirable.
- Applicants must have the legal right to work in the UK.
Benefits
- Competitive annual salary, corporate bonus scheme, pension scheme, and annual performance-related pay reviews.
- Life assurance, income protection, private medical and dental insurance, and an employee assistance programme.
- Flexible working options with hybrid or remote work arrangements.
- Continuous Learning Hub with learning paths, certifications, mentoring, and career development support.
- Discounted gym membership, two paid volunteering days annually, and a cycle-to-work scheme.
About Allstate
Allstate is a major U.S. personal-lines insurer that sells auto, homeowners, renters, and life policies to consumers through agents and direct online channels. It earns premiums and service fees across insurance and protection products, including telematics-based programs and device/identity protection. Founded in 1931 and headquartered in Northbrook, Illinois, Allstate is publicly traded on the NYSE under the ticker ALL.