Lead Incident Response & AI-Driven Security Operations

Allstate Insurance; Illinois; On-site; USD 120,000 - 193,725; Full time

Job summary

Allstate Insurance seeks a Senior Incident Handler to lead incident response for enterprise-scale security events. You will own end-to-end response, coordinate cross-functional teams, and drive adoption of AI-assisted tooling.

Candidates bring 5+ years in security operations, strong leadership, and solid expertise in EDR/XDR, SIEM, forensic analysis, and scripting. This role offers a path to mature our incident command function.

Qualifications

• 5+ years in cybersecurity operations or incident response, with enterprise-scale incidents
• Strong incident commander/technical lead experience in high-stakes moments
• Deep knowledge of network security, EDR/XDR, logs/forensics, and cloud telemetry

Responsibilities

• Lead incident handling during critical events from detection to recovery
• Coordinate cross-functional responders and communicate with executives
• Drive AI/automation adoption to accelerate triage and investigation
• Develop and refine playbooks and incident response tooling

Skills

Cyber Incident Response

Executive Communications

EDR/XDR

Scripting

Threat Hunting

Technical Leadership

Tools

SIEM

Forensic Tools

Python

PowerShell

Job description

Allstate Insurance seeks a Senior Incident Handler to lead incident response for enterprise-scale security events. You will own end-to-end response, coordinate cross-functional teams, and drive adoption of AI-assisted tooling.

Candidates bring 5+ years in security operations, strong leadership, and solid expertise in EDR/XDR, SIEM, forensic analysis, and scripting. This role offers a path to mature our incident command function.