Managing Engineer - Data Security Engineering

Allstate is an insurance company that develops technology and protection solutions to address customers’ evolving needs. The Managing Engineer, Data Security Engineering leads a team that designs, builds, and operates scalable data security products and controls across DLP Policy, Data Intelligence, and Data Access. The role combines people leadership, technical direction, hands-on engineering, and delivery ownership to protect sensitive data while enabling appropriate business use.

Responsibilities:

• Build and lead a high-performing team accountable for engineering data security products and controls
• Set technical direction and drive execution across architecture, design, implementation, deployment, and production support
• Provide hands-on technical leadership through code and, solution design, key technical decisions, and critical implementation work
• Guide the engineering of capabilities across DLP Policy, Data Intelligence, or Data Access, including policy automation, data discovery and classification, and access controls
• Develop and advance policy-as-code workflows, reusable control patterns, detection logic, platform integrations, and automated testing and deployment
• Automate control lifecycle activities, including validation, configuration drift detection, reporting, alert enrichment, and operational health checks
• Own the reliability, effectiveness, adoption, and continuous improvement of the team’s products and controls
• Translate complex data security requirements into scalable technical solutions and measurable outcomes

Requirements:

• 5+ years of professional software, data, or security engineering experience, including ownership of production systems and technical products
• 2+ years of experience leading engineers while remaining actively engaged in technical design, code reviews, and complex engineering work
• Deep technical knowledge of data protection, including DLP, data discovery and classification, information protection, data access controls, and data governance
• Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures
• Strong scripting and automation proficiency using Python, PowerShell, REST APIs, Terraform, YAML, JSON, or comparable technologies
• Proven ability to build version-controlled security solutions using policy as code, automated delivery pipelines, APIs, and reusable components
• Demonstrated success transforming manual, console-based administration into scalable, automated operating models
• Familiarity with Microsoft Purview and other enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance
• Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures
• Proven ability to influence technical decisions and drive adoption of secure patterns and engineering standards across product areas
• Demonstrated success mentoring senior engineers and developing emerging technical leaders
• Understanding of security and operational measures, such as control adoption, detection quality, reliability, and risk reduction, used to evaluate engineering outcomes and guide priorities