Senior Database Engineer – Security & Data Platform Resilience

Allstate is hiring a Senior Database Engineer to apply database and data-platform expertise to cybersecurity exposure management. The role identifies and prioritizes data-access risks, validates potential exposures, and partners with platform and security teams on practical remediation and preventative engineering controls.

Responsibilities:

• Apply your database and data-platform engineering expertise across RDBMS, NoSQL, data warehouses, object storage, and related data services. Analyze database configurations, permissions, access models, storage, encryption, and service-to-service access through a security lens
• Investigate issues such as overly broad access, stale entitlements, exposed storage, weak auditability, and misconfigured access policies
• Use queries, logs, and technical evidence to validate potential exposures and understand their real-world impact. Identify potential attack paths that could lead to unauthorized data access, privilege expansion, or sensitive-data exposure
• Partner with database, data platform, cloud, and security teams to develop practical remediation strategies and preventative engineering guardrails
• Help prioritize which issues matter most based on exploitability and potential business impact rather than treating every technical finding equally
• Help reduce recurring database and data-access risks through better engineering practices, configurations, and controls

Requirements:

• Interest in developing deeper expertise in data security, attack-path analysis, and Continuous Threat Exposure Management (CTEM)
• Strong hands-on experience in database engineering, database administration, or data-platform engineering
• Experience working with RDBMS and/or NoSQL database technologies and their underlying architecture, configuration, and operations
• Solid understanding of database authentication, authorization, roles, permissions, and access models
• Experience troubleshooting complex database or data-platform issues using queries, logs, or other technical data
• Experience identifying or remediating overly broad permissions, stale access, misconfigured storage, or service-to-service access concerns
• Understanding of how database and data-layer weaknesses could contribute to privilege escalation, unauthorized access, or data exposure
• Working knowledge of database hardening, access controls, encryption, vulnerability remediation, or other security considerations encountered through database engineering work
• Ability to analyze complex technical issues and translate them into practical engineering solutions
• Strong collaboration skills with the ability to work across database, platform, cloud, engineering, and cybersecurity teams
• Authentication Methods
• Cloud Data Architecture
• Database Access Control
• Database Engineering
• Database Segmentation
• Security Configuration
• Experience with data warehouses, object storage, cloud databases, or cloud data services
• Experience with database hardening and secure configuration practices
• Familiarity with cloud data services and their permission models
• Exposure to data-access governance, security engineering, vulnerability management, or exposure management