Cyber Exposure Response Lead - Remote & Incident Command

Allstate Northern Ireland Limited; United States; Remote; USD 100,000 - 171,000; Full time

Job summary

Allstate is seeking a Cyber Security Exposure Response Lead for a fully remote US-based role. The role focuses on modernizing exposure management, investigating critical vulnerabilities, and coordinating rapid remediation with SOC and Incident Response teams.

You will lead investigations, provide direction during incidents, and mentor analysts. The position requires 5+ years in cybersecurity operations, with strong hands-on investigation and incident response skills.

Qualifications

• 5+ years of cybersecurity or technology operations experience involving technical investigation, coordination, escalation, and resolution.
• Proven ability to lead high-priority, fast-moving operational events and make sound decisions with incomplete or changing information.
• Ability to coordinate across technical teams without direct authority and drive issues toward resolution.
• Experience mentoring, training, or providing technical guidance to developing analysts.

Responsibilities

• Investigate newly disclosed CVEs, zero-days with unknown scope, KEVs, and critical exposures; determine impact and refine scope.
• Lead fast-moving exposure events; serve as Incident Commander when appropriate and coordinate response.
• Coordinate across technology and security teams to establish ownership, drive remediation, and escalate blockers.
• Provide hands-on coaching to develop analysts in exposure investigation, threat hunting, and incident response.
• Maintain clear operational awareness and documentation of active events and handoffs.

Skills

Cybersecurity operations

Incident response

Threat hunting

Endpoint security

Exposure management

Threat assessment

Vulnerability management

Security operations

Education

Bachelor's degree in a related field

Job description

Allstate is seeking a Cyber Security Exposure Response Lead for a fully remote US-based role. The role focuses on modernizing exposure management, investigating critical vulnerabilities, and coordinating rapid remediation with SOC and Incident Response teams.

You will lead investigations, provide direction during incidents, and mentor analysts. The position requires 5+ years in cybersecurity operations, with strong hands-on investigation and incident response skills.