Applications & APIs Service Lead Consultant

Allstate

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
IL
Salary
$100,000–$170,500 / yr
Employment
Full-time
Posted
5 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $169k
This role $135k
$88k $215k
below market most similar roles pay here above market

This role pays less than 76% of similar roles. Most pay $138,768–$199,650 — the blue band above. At the midpoint, this role pays about $135k versus about $169k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 52 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 51 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Applications & APIs Service Lead Consultant

Role Posting Log in to save

JOB TITLE: Applications & APIs Service (Lead) Consultant - Exposure Intelligence The Applications & APIs Service (Lead) Consultant joins the Exposure Management function within the cybersecurity organization. This role serves as a subject matter expert responsible for identifying and prioritizing exposure risks across web applications, APIs, and authentication flows. You will translate security findings into practical engineering improvements, connecting vulnerabilities to real attack paths using CTEM principles. Day-to-day responsibilities include producing remediation guidance, identifying systemic patterns like broken authentication or injection paths, and partnering with engineering teams to build resilient solutions. You will utilize skills in API development, application design, and secure software development lifecycle practices. The role requires proficiency with SAST, DAST, OAuth, and OpenID Connect to solve the technical problem of shifting from traditional patching to strategic, exploitability-based risk mitigation across distributed application environments.

Skills

API Development Application Security SAST DAST OAuth OpenID Connect Microservices Secure Software Development Lifecycle Web Application Development Cloud-native Applications API Gateways Authentication Authorization Threat Modeling Session Management OWASP Top 10

What you'll do

  • Translate application findings into exposure intelligence and prioritize risks based on exploitability.
  • Identify attack paths involving authentication flaws, insecure APIs, weak session handling, and privilege boundaries.
  • Produce clear remediation guidance and partner with application owners to validate the closure of vulnerabilities.
  • Serve as the subject matter expert for web, application, and API exposure risks including OWASP-class threats.
  • Identify systemic patterns such as broken access controls, injection paths, and insecure secrets handling.
  • Partner with development teams to improve secure coding patterns and reduce recurring exposure creation.
  • Evaluate application and API risks to understand how vulnerabilities affect the broader technology environment.
  • Translate security findings into practical engineering improvements and maintainable technical solutions.

What we're looking for

  • Professional experience designing, developing, testing, and supporting modern software applications.
  • Strong programming and software engineering fundamentals including experience with production code, APIs, and distributed environments.
  • Experience building or supporting web applications, backend services, APIs, microservices, or cloud-based applications.
  • Working knowledge of secure coding practices and common application or API security risks.
  • Hands-on experience addressing security findings, improving vulnerable code, or participating in security reviews.
  • Ability to analyze complex technical issues and translate them into practical, maintainable engineering solutions.
  • Experience collaborating across engineering, architecture, product, operations, and cybersecurity teams.
  • Strong communication skills to explain technical risk and remediation options to different audiences.

Related searches

More Applications & APIs Service jobs Remote Applications & APIs Service jobs All jobs at Allstate

More like this

Similar roles

Attack Surface Management Service Lead Consultant

Allstate

Remote (IL) 12 days ago $100,000–$170,500
Attack Surface Management Vulnerability Management Cloud Security Network Security Threat and Vulnerability Management Asset Inventory Management Censys Qualys DNS Certificates CMDB Penetration Testing Cyber Threat Hunting Cyber Incident Response Third-Party Risk Management
3+ yrs exp Remote
Save

Security Engineer, Application Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 14 days ago $118,500–$171,825
Application Security DevSecOps SAST DAST SCA Threat Modeling Infrastructure as Code Python Java JavaScript TypeScript Node.js C# Go SQL Bash AWS Azure Kubernetes OpenShift Docker Terraform Bicep Helm GitHub Actions Jenkins Azure DevOps Burp Suite OWASP ZAP Checkmarx Veracode Fortify SonarQube Snyk Prisma Cloud Wiz Tenable Aqua Security Trivy Postman SoapUI HIPAA HITRUST NIST Cybersecurity Framework FedRAMP FISMA FIPS OWASP Top 10 OWASP API Security Top 10 OWASP ASVS
5+ yrs exp Hybrid
Save

API Security Engineer

Fiserv

Berkeley Heights, NJ +2 4 days ago $110,000–$186,000
API Security OAuth2 OIDC JWT mTLS CI/CD DevSecOps Open API JSON Schema SAST DAST WAF WAAP Service Mesh Policy-as-Code NIST ISO 27001 PCI DSS FAPI OWASP Traceable Salt Security NoName
5+ yrs exp
Save

Lead Consultant, Infrastructure & Systems, Service

Allstate

Remote (IL) 70 days ago $100,000–$170,500
Kubernetes Docker Linux Windows Python PowerShell KQL SQL Virtualization Security Engineering Incident Response CIS Benchmarks Infrastructure Hardening Root Cause Analysis Threat Assessment
3+ yrs exp Remote
Save