Exposure Response Lead - Cyber Incident Command

Allstate; United States; Hybrid; USD 100,000 - 171,000; Full time

Benefits offered by this job

Tech setup provided

Home office stipend

Dedicated home workspace required

High-speed internet access

Job summary

Allstate is seeking a Senior hands-on Exposure Response Lead to protect the enterprise from critical vulnerability and exposure risk. You will perform advanced technical investigation, threat hunting, and incident response, engaging SOC and Incident Response teams as needed to support timely risk reduction.

The role spans vulnerability management, threat hunting, security operations, and incident response, with on-call rotations and 24/7 coverage.

Qualifications

• 5+ years of cybersecurity or technology operations experience involving technical investigation, coordination, escalation, and resolution.
• Demonstrated ability to lead or coordinate high-priority, fast-moving operational events and make sound decisions with incomplete or changing information.
• Strong hands-on technical and investigative skills, with the ability to correlate multiple data sources, test assumptions, establish scope and impact, and determine required actions.
• Ability to coordinate across technical teams without direct authority and drive issues toward resolution.
• Experience mentoring, training, or providing technical guidance to developing analysts.

Responsibilities

• Investigate newly disclosed CVEs, zero-days with unknown scope or impact, KEVs, actively exploited vulnerabilities, and critical exposures; correlate data, test hypotheses, and refine scope and impact as information evolves.
• Lead fast-moving exposure events as Incident Commander when appropriate; make timely decisions and coordinate parallel workstreams.
• Coordinate across technology and security teams to establish ownership, drive remediation, and escalate when findings indicate compromise.
• Provide hands-on coaching and development to analysts, strengthening capabilities in exposure investigation and incident response.
• Maintain clear operational awareness and documentation of active events with structured handoffs across coverage periods.

Skills

Cybersecurity experience

Operational leadership

Technical investigation

Coordination without authority

Mentoring analysts

Job description

Allstate is seeking a Senior hands-on Exposure Response Lead to protect the enterprise from critical vulnerability and exposure risk. You will perform advanced technical investigation, threat hunting, and incident response, engaging SOC and Incident Response teams as needed to support timely risk reduction.

The role spans vulnerability management, threat hunting, security operations, and incident response, with on-call rotations and 24/7 coverage.