Managing Engineer, Data Security Engineering

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Product Security Engineering designs, builds, and operates enterprise security controls as software products that integrate directly into cloud platforms, the software development lifecycle, and core enterprise services. The organization applies modern software and cloud engineering practices to deliver scalable, reliable, and developer-friendly security capabilities that enable secure-by-default behaviors across the enterprise.

The Managing Engineer, Data Security Engineering leads a team responsible for designing, building, and operating capabilities across DLP Policy, Data Intelligence, and Data Access. This role combines people leadership, technical direction, and delivery ownership, ensuring the team delivers automated, scalable, and measurable solutions that protect sensitive data while enabling appropriate business use.

• Build and lead a high-performing team accountable for engineering data security products and controls.
• Set technical direction and drive execution across architecture, design, implementation, deployment, and production support.
• Provide hands‑on technical leadership through code and, solution design, key technical decisions, and critical implementation work.
• Guide the engineering of capabilities across DLP Policy, Data Intelligence or Data Access, including policy automation, data discovery and classification, and access controls.
• Develop and advance policy‑as‑code workflows, reusable control patterns, detection logic, platform integrations, and automated testing and deployment.
• Automate control lifecycle activities, including validation, configuration drift detection, reporting, alert enrichment, and operational health checks.
• Own the reliability, effectiveness, adoption, and continuous improvement of the team’s products and controls.
• Translate complex data security requirements into scalable technical solutions and measurable outcomes.

• All applicants must demonstrate they have a legal right to work in the UK for employment state is not providing sponsorship for this vacancy.
• A minimum of 4 years of professional software, data, or security engineering experience, including ownership of production systems and technical products.
• A minimum of 2 years of experience leading engineers while remaining actively engaged in technical design, code reviews, and complex engineering work.
• Deep technical knowledge of data protection, including DLP, data discovery and classification, information protection, data access controls, and data governance.
• Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures.
• Strong scripting and automation proficiency using Python, Power Shell, REST APIs, Terraform, YAML, JSON, or comparable technologies.
• Proven ability to build version‑controlled security solutions using policy as code, automated delivery pipelines, APIs, and reusable components.
• Demonstrated success transforming manual, console‑based administration into scalable, automated operating models.

• Familiarity with Microsoft Purview and other enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance.
• Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise…