Senior Database Engineer – Security & Data Platform Resilience

Overview

Senior Database Engineer on Allstate's Exposure Management team within the cybersecurity organization, applying database and data-platform engineering expertise to identify and prioritize data-access exposure risk.

What you'll do

• Apply database and data-platform engineering expertise across RDBMS, NoSQL, data warehouses, object storage, and related data services.
• Analyze database configurations, permissions, access models, storage, encryption, and service-to-service access through a security lens.
• Investigate overly broad access, stale entitlements, exposed storage, weak auditability, and misconfigured access policies.
• Use queries, logs, and technical evidence to validate potential exposures and understand their real-world impact.
• Identify potential attack paths that could lead to unauthorized data access, privilege expansion, or sensitive-data exposure.
• Partner with database, data platform, cloud, and security teams to develop practical remediation strategies and preventative engineering guardrails.
• Help prioritize which issues matter most based on exploitability and potential business impact rather than treating every technical finding equally.
• Help reduce recurring database and data-access risks through better engineering practices, configurations, and controls.

What you'll need

• Interest in developing deeper expertise in data security, attack-path analysis, and Continuous Threat Exposure Management (CTEM).
• Strong hands-on experience in database engineering, database administration, or data-platform engineering.
• Experience working with RDBMS and/or NoSQL database technologies and their underlying architecture, configuration, and operations.
• Solid understanding of database authentication, authorization, roles, permissions, and access models.
• Experience troubleshooting complex database or data-platform issues using queries, logs, or other technical data.
• Experience identifying or remediating overly broad permissions, stale access, misconfigured storage, or service-to-service access concerns.
• Understanding of how database and data-layer weaknesses could contribute to privilege escalation, unauthorized access, or data exposure.
• Working knowledge of database hardening, access controls, encryption, vulnerability remediation, or other security considerations encountered through database engineering work.
• Ability to analyze complex technical issues and translate them into practical engineering solutions.
• Strong collaboration skills with the ability to work across database, platform, cloud, engineering, and cybersecurity teams.

Nice to have

• Experience with data warehouses, object storage, cloud databases, or cloud data services.
• Experience with database hardening and secure configuration practices.
• Familiarity with cloud data services and their permission models.
• Exposure to data-access governance, security engineering, vulnerability management, or exposure management.

Details

• Location: US, remote.
• Compensation: $100,000.00 - $170,500.00 annually, based on experience and qualifications.
• Candidates offered the position will be required to submit to a background investigation.
• Allstate generally does not sponsor individuals for employment-based visas for this position.
• Employees eligible to work from home require a dedicated private workspace and internet with minimum speeds of 50 MB download and 5 MB upload.