Product Security Engineer: Build Secure, Scalable Services

Allstate; United States; On-site; USD 91,000 - 196,000; Full time

Job summary

Allstate is seeking a Product Security Engineer to design, build, and operate enterprise security controls embedded into our software ecosystem. You will own the full SDLC lifecycle from design to production support, delivering reliable, secure software through modern engineering practices.

The role emphasizes collaboration with product managers and platform teams to deliver scalable security outcomes, including cloud-based microservices and APIs.

Qualifications

• Minimum 3+ years of software engineering experience with ownership of production systems across the full software development lifecycle.
• Experience designing, building, and operating scalable distributed systems and cloud-based applications.

Responsibilities

• Design, build, and operate enterprise security controls as software products integrated into the SDLC.
• Own security control capabilities end-to-end including architecture, deployment, and production support.
• Write, test, and maintain high-quality production code delivering reliability and security outcomes.
• Apply engineering best practices such as test-driven development, pair programming, and CI/CD.
• Collaborate with product managers and platform teams to align security controls with enterprise needs.
• Continuously evaluate and adopt new technologies to improve security controls.

Skills

API Development

Application Security

Cloud Based Solutions

Java

JavaScript

Distributed Systems

Microservices Architecture

REST APIs

Test Driven Development

Agile

Tools

Docker

Kubernetes

AWS

Azure

Job description

Allstate is seeking a Product Security Engineer to design, build, and operate enterprise security controls embedded into our software ecosystem. You will own the full SDLC lifecycle from design to production support, delivering reliable, secure software through modern engineering practices.

The role emphasizes collaboration with product managers and platform teams to deliver scalable security outcomes, including cloud-based microservices and APIs.