Remote: Exposure Intelligence Analyst – Apps & APIs

Allstate Insurance; Illinois; On-site; USD 100,000 - 171,000; Full time

Benefits offered by this job

Connectivity reimbursement

Home office setup

Job summary

Allstate Insurance seeks an Exposure Intelligence Analyst for Applications & APIs to drive SME coverage of web/app/API exposure, including OWASP risks and API misuse patterns. You will translate findings into risk-based guidance and collaborate with developers to improve secure patterns.

Join a team focused on reducing exploitable paths and enhancing remediation speed, with a strong emphasis on collaboration across engineering orgs.

Qualifications

• 3+ years in application security, AppSec engineering, security operations, or exposure management.

Responsibilities

• Translate application findings into exposure intelligence and prioritize exploitability.
• Identify attack paths involving auth flaws, insecure APIs, weak session handling, and privilege boundaries.
• Produce remediation guidance and partner with app owners to validate closure.

Skills

Application security

Web security fundamentals

API security

Business risk translation

Tools

SAST/DAST tools

OAuth/OIDC

API gateways

Microservices

Secure SDLC

Job description

Allstate Insurance seeks an Exposure Intelligence Analyst for Applications & APIs to drive SME coverage of web/app/API exposure, including OWASP risks and API misuse patterns. You will translate findings into risk-based guidance and collaborate with developers to improve secure patterns.

Join a team focused on reducing exploitable paths and enhancing remediation speed, with a strong emphasis on collaboration across engineering orgs.