Attack Surface Management Lead — Expert Consultant

Allstate Foundation; Illinois; On-site; USD 100,000 - 171,000; Full time

Benefits offered by this job

Connectivity reimbursement

Job summary

Allstate is seeking a Lead Consultant to establish and grow the Attack Surface Management capability within the cybersecurity organization. You will discover, monitor, and govern the enterprise's internet-facing exposure, partnering with asset owners to drive remediation that reduces exploitable risk.

You will own SME coverage for external attack surface discovery using EASM tools, extend visibility to third-party footprints, and collaborate with Penetration Testing, Product Security, and

Qualifications

• 3+ years in attack surface management or related security domains.
• Strong understanding of internet-facing infrastructure and misconfigurations.
• Ability to translate findings into business risk and remediation actions.
• Hands-on experience with Censys or similar EASM platforms.
• Familiarity with asset inventory/CMDB processes, cloud provider connectors, and third-party risk practices.

Responsibilities

• Translate external findings into exposure intelligence and prioritize risk.
• Identify attack paths from internet-facing assets and misconfigurations.
• Produce remediation guidance and partner with asset owners to close gaps.
• Own SME coverage for external attack surface discovery and monitoring using EASM.
• Extend visibility to third-party, subsidiary, and cloud footprints and collaborate with security teams.

Skills

Attack Surface Management

External Attack Surface Management

Asset Discovery

Cloud Security

Network Security

Vulnerability Management

Cyber Threat Hunting

Threat and Vulnerability Assessment

Stakeholder Management

IT Security Operations

Tools

Censys

Qualys

Job description

Allstate is seeking a Lead Consultant to establish and grow the Attack Surface Management capability within the cybersecurity organization. You will discover, monitor, and govern the enterprise's internet-facing exposure, partnering with asset owners to drive remediation that reduces exploitable risk.

You will own SME coverage for external attack surface discovery using EASM tools, extend visibility to third-party footprints, and collaborate with Penetration Testing, Product Security, and