Senior Threat Modeling Platform Architect

Allstate; United States; Hybrid; USD 93,000 - 127,000; Full time

Benefits offered by this job

Hybrid working

Pension scheme

Private medical insurance

Life assurance

Job summary

Allstate NI is seeking a Senior Threat Modeling Platform Consultant to drive secure-by-design across enterprise platforms. You will embed threat modeling in discovery through production, guiding engineering teams and influencing architectural decisions.

Lead engagements across applications and domains, balancing security with business objectives while collaborating with Security Operations and Product Security teams. Hybrid work options available.

Qualifications

• Legal right to work in the UK; Allstate sponsorship not provided.
• Minimum of 3 years in software security or related enterprise roles.
• Experience as technical advisor, architect, or security partner.
• Deep threat modeling knowledge (STRIDE, Attack Trees, Kill Chains).
• Strong programming background in one or more modern languages.

Responsibilities

• Serve as trusted security consultant on architecture, platform design, and threat modeling.
• Lead threat modeling engagements across applications and domains.
• Embed secure-by-design principles in software delivery processes.
• Define and influence platform security strategies with stakeholders.
• Provide risk-based security recommendations balancing security and business goals.
• Collaborate with Security Operations and Product Security to enhance detection and resilience.
• Facilitate architecture reviews and threat modeling sessions.
• Champion AI security, API security, SaaS security, and automation initiatives.

Skills

Legal right to work in UK

3+ years in software/security/solution

Technical advisory/architect support

Threat modeling knowledge (STRIDE, ATT

Tools

Java

JavaScript

Python

Go

Rust

OpenAPI/Swagger

CI/CD

AI Security

Cloud platforms (AWS/Azure/GCP)

Job description

Allstate NI is seeking a Senior Threat Modeling Platform Consultant to drive secure-by-design across enterprise platforms. You will embed threat modeling in discovery through production, guiding engineering teams and influencing architectural decisions.

Lead engagements across applications and domains, balancing security with business objectives while collaborating with Security Operations and Product Security teams. Hybrid work options available.