Product Security Engineer (Multiple Levels)

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. Your role in the team: The Product Security Engineer partners in designing and building security solutions that will balance the need for speed and flexibility of the infrastructure and IaaS/PaaS/SaaS applications, with the need to protect Allstate against ongoing and potential security threats. This role needs to have the aptitude to understand new security strategies. This position has been opened at Senior Consultant II and Lead Consultant. Key responsibilities: Cyber Risk Assessment & Governance Lead and execute enterprise, business-unit, and technology-specific cyber risk assessments , including inherent risk identification, control adequacy evaluation, residual risk determination, and risk prioritization . Develop, enhance, and operationalize cyber risk ass...