Senior Data Security Engineer

Allstate

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
IL
Salary
$90,700–$190,000 / yr
Posted
24 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $177k
This role $140k
$76k most similar roles pay here $224k

This role pays less than 78% of similar roles. Most pay $145,700–$208,800 — the shaded band above. At the midpoint, this role pays about $140k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 36 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 36 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Senior Data Security Engineer

Senior Data Security Engineer The Senior Data Security Engineer joins the security team to lead the evolution of enterprise data protection from traditional tool administration toward an engineering-driven capability. This role focuses on building scalable, automated, and measurable solutions across cloud, SaaS, endpoint, email, and collaboration environments. The engineer will develop CI/CD pipelines for policy lifecycle management, automate operational tasks like configuration drift detection and alert enrichment, and design guardrails for sensitive data usage. Key responsibilities include engineering DLP controls, tuning detection logic to reduce false positives, and integrating platforms such as Microsoft Purview and Defender for Cloud Apps. Required skills include Policy-as-Code, DevSecOps, and Infrastructure-as-Code using tools like PowerShell, Python, Terraform, Bicep, and REST APIs. The role addresses the technical challenge of modernizing data protection programs through automation and standardized engineering practices across complex enterprise architectures.

What you'll do

  • Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, network, and web channels.
  • Transition manual data protection policies into automated, version-controlled "Policy-as-Code" workflows.
  • Build CI/CD pipelines to manage the lifecycle of data protection policies including testing and deployment.
  • Automate operational tasks such as configuration drift detection, alert enrichment, and health checks.
  • Tune detection logic using data-driven analysis to reduce false positives and improve signal quality.
  • Design security guardrails for sensitive data across Microsoft 365, cloud platforms, and collaboration tools.
  • Integrate DLP and CASB systems with SIEM, SOAR, and identity platforms to enhance visibility.
  • Develop metrics and dashboards to measure risk reduction and the effectiveness of security controls.

What we're looking for

  • 4+ years of experience delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities.
  • Proven experience in Policy-as-Code, Security-as-Code, and DevSecOps methodologies to automate security control deployment.
  • Track record of replacing manual processes with engineering-driven solutions using automation, APIs, Infrastructure-as-Code, and platform engineering.
  • Advanced knowledge of Data Loss Prevention (DLP), data classification, information protection, and data governance principles.
  • Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and the Microsoft 365 security ecosystem.
  • Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures.
  • Proficiency in scripting and automation tools including PowerShell, Python, REST APIs, Terraform, Bicep, YAML, or JSON.
  • Knowledge of regulatory, privacy, and compliance requirements implemented through scalable technical controls.

More like this

Similar roles

Data Security Engineer

Fiserv

Columbus, OH +4 6 days ago $109,000$182,400
PAM IAM CyberArk SAML PingID DLP Forcepoint Broadcom CrowdStrike Tanium PKWARE Windows Unix Linux Encryption AI ML Incident Response
6+ yrs exp

Data Security Engineer

Fiserv

Columbus, OH +4 6 days ago $109,000$182,400
Cybersecurity PAM IAM CyberArk Windows Unix Linux SAML PingID DLP Forcepoint Broadcom CrowdStrike Tanium PKWARE Encryption AI ML Incident Response
6+ yrs exp

Data Security Engineer

Fiserv

Columbus, OH +4 6 days ago $109,000$182,400
Cybersecurity Identity and Access Management (IAM) Privileged Access Management (PAM) CyberArk SAML PingID Data Loss Prevention (DLP) Forcepoint Broadcom CrowdStrike Tanium PKWARE Unix Linux Windows Encryption AI/ML
6+ yrs exp

Senior Security Engineer

Oracle

Reston, VA +2 51 days ago $82,200$187,000
Encryption Hashing Masking Access Management Security Monitoring Data Security Disaster Recovery
3+ yrs exp

Senior Security Engineer

T. Rowe Price

Owings Mills, MD 30 days ago $121,000$206,000
AWS Terraform Python Go Java Infrastructure as Code GitLab CI/CD Policy-as-Code OPA Trivy IAM Cloud Governance Security Engineering Automation Cybersecurity Frameworks
5+ yrs exp Hybrid