Exposure Intelligence Engineer – Apps & APIs (Remote)

Allstate; United States; Remote; USD 100,000 - 171,000; Full time

Benefits offered by this job

Laptop and monitors provided

Connectivity reimbursement

Job summary

Allstate is seeking a software-focused professional to join the Exposure Management team, bridging software engineering and cybersecurity to assess and reduce application and API risks. You will translate findings into concrete engineering improvements and help teams build more secure solutions.

This role emphasizes remediation, cross-team collaboration, and maintaining code quality while decreasing exploitable exposure.

Qualifications

• Professional experience designing, developing, testing, and supporting modern software applications.
• Strong programming and software engineering fundamentals, including experience working with production code, APIs, service integrations, and distributed application environments.
• Experience building or supporting web applications, backend services, APIs, microservices, or cloud-based applications.
• Working knowledge of secure coding practices and common application or API security risks.
• Hands-on experience addressing security findings, improving vulnerable code, participating in security reviews, or partnering with Application Security teams.
• Ability to analyze complex technical issues and turn them into practical, maintainable engineering solutions.
• Experience collaborating across engineering, architecture, product, operations, and cybersecurity teams.
• Strong communication skills, including the ability to explain technical risk and remediation options to different audiences.

Responsibilities

• Exposure Intelligence (Core) Translate application findings into exposure intelligence and exploitability-based prioritization. Identify attack paths involving auth flaws, insecure APIs, weak session handling, and privilege boundaries. Produce clear remediation guidance and partner with app owners to validate closure.
• Applications & APIs (Domain) Own SME coverage for web/app/API exposure including OWASP-class risks and API misuse patterns. Identify systemic patterns: broken auth, insecure direct object references, injection paths, weak access controls, insecure secrets handling. Partner with dev teams and AppSec stakeholders to improve secure patterns and reduce recurring exposure creation.

Skills

Software engineering

Programming

Web applications

APIs

Security practices

Security reviews

Cross-functional collaboration

Communication

Job description

Allstate is seeking a software-focused professional to join the Exposure Management team, bridging software engineering and cybersecurity to assess and reduce application and API risks. You will translate findings into concrete engineering improvements and help teams build more secure solutions.

This role emphasizes remediation, cross-team collaboration, and maintaining code quality while decreasing exploitable exposure.