Remote Exposure Intelligence Analyst – Data Stores

Allstate; United States; On-site; USD 100,000 - 171,000; Full time

Job summary

Allstate seeks an Exposure Intelligence Analyst – Databases & Data Stores to identify and prioritize data exposure risks across data platforms, including databases, NoSQL, and data storage services. You will translate risk into remediation priorities and work with data teams to reduce unauthorized access and data exfiltration.

In this role, you will apply CTEM principles, quantify impact, and drive improvements in data permissions, encryption posture, and access controls across enterprise data

Qualifications

• 3+ years in data platform security, cloud security, security engineering, or exposure management.
• Understanding of data access models, permissioning, and common misconfiguration patterns.
• Ability to translate data risk into business impact and remediation priorities.

Responsibilities

• Correlate security signals into exposure narratives focused on exploitability and impact.
• Identify attack paths that lead to data access, privilege expansion, and sensitive data exposure.
• Provide clear prioritization and remediation guidance; track closure outcomes.
• Own SME coverage for data-layer exposure: insecure permissions, exposed storage, weak encryption posture, misconfigured access policies, risky service-to-service access.
• Identify systemic patterns: over-broad access, stale entitlements, misconfigured storage endpoints, weak auditability.
• Partner with data owners/platform teams to reduce exposure creation and improve prevention guardrails.

Skills

Exposure management

Data platform security

Data access models

Query/log analysis

Job description

Allstate seeks an Exposure Intelligence Analyst – Databases & Data Stores to identify and prioritize data exposure risks across data platforms, including databases, NoSQL, and data storage services. You will translate risk into remediation priorities and work with data teams to reduce unauthorized access and data exfiltration.

In this role, you will apply CTEM principles, quantify impact, and drive improvements in data permissions, encryption posture, and access controls across enterprise data