Lead Apps & APIs Security Consultant (Exposure Intelligence)

Allstate Insurance Company; Illinois; Hybrid; USD 100,000 - 171,000; Full time

Job summary

Allstate Insurance Company is seeking an Exposure Intelligence Analyst – Applications & APIs to identify and prioritize exposure risk across web applications, APIs, authentication/authorization flows, and testing signals (SAST/DAST).

You will translate findings into actionable remediation guidance and partner with engineering teams to reduce exploitable exposure, improving security posture and risk outcomes.

Qualifications

• 3+ years in application security, AppSec engineering, security operations, or exposure management.
• Understanding of web security fundamentals and common API/application attack patterns.
• Ability to translate technical findings into business risk and practical engineering fixes.

Responsibilities

• Translate application findings into exposure intelligence and exploitability-based prioritization.
• Identify attack paths involving auth flaws, insecure APIs, weak session handling, and privilege boundaries.
• Produce remediation guidance and partner with app owners to validate closure.

Skills

API security

Web security

Application security

Authentication

Secure SDLC

Vulnerability management

OAuth/OIDC

Web Application Security

Tools

SAST tools

DAST tools

Job description

Allstate Insurance Company is seeking an Exposure Intelligence Analyst – Applications & APIs to identify and prioritize exposure risk across web applications, APIs, authentication/authorization flows, and testing signals (SAST/DAST).

You will translate findings into actionable remediation guidance and partner with engineering teams to reduce exploitable exposure, improving security posture and risk outcomes.