Head of Security Engineering & DevSecOps

Allstate; Belfast City District; On-site; GBP 90,000 - 130,000; Full time

Job summary

Allstate seeks a Lead Engineer - Security Engineering to guide day-to-day security controls across product teams, partnering with global stakeholders. You will deliver secure software development, cloud security, and DevSecOps practices while driving measurable security KPIs.

You will mentor engineers, translate security strategy into concrete goals, and ensure secure design across the full production lifecycle, including risk assessments and compliance considerations.

Qualifications

• Minimum 5 years in software or security engineering.
• Minimum 3 years in technical leadership or managerial role.
• Deep understanding of secure development, vulnerability management, cloud security, and data security.
• Experience with secure APIs, authentication/authorization, encryption, and threat modeling.
• Experience in DevSecOps with production lifecycle responsibilities.

Responsibilities

• Advise others on complex security engineering matters.
• Translate security strategy into challenging, meaningful goals.
• Lead teams responsible for strategic security architecture.
• Propagate secure software best practices across the organization.
• Own secure digital product design and production monitoring with KPIs.
• Collaborate with business and technical teams on security needs.
• Evaluate security tool integrations (IAM, SIEM, vulnerability management, cloud security).

Skills

Security engineering

Software engineering

Technical leadership

DevSecOps

Cloud security

Vulnerability management

Secure SDLC

Threat modeling

Authentication/Authorization

IAM

SIEM

TDD

Agile SCRUM

Encryption

Tools

DevSecOps tools

Job description

Allstate seeks a Lead Engineer - Security Engineering to guide day-to-day security controls across product teams, partnering with global stakeholders. You will deliver secure software development, cloud security, and DevSecOps practices while driving measurable security KPIs.

You will mentor engineers, translate security strategy into concrete goals, and ensure secure design across the full production lifecycle, including risk assessments and compliance considerations.