Attack Surface Management Service Lead Consultant

Allstate

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
IL
Salary
$100,000–$170,500 / yr
Employment
Full-time
Posted
12 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $173k
This role $135k
$87k $220k
below market most similar roles pay here above market

This role pays less than 78% of similar roles. Most pay $138,075–$207,487 — the blue band above. At the midpoint, this role pays about $135k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 52 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 51 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Attack Surface Management Service Lead Consultant

Role Posting Log in to save

The Attack Surface Management Service Lead Consultant joins the Exposure Intelligence Team within the cybersecurity organization. As a founding member of this new capability, the Lead Consultant serves as the subject matter expert for discovering, monitoring, and governing the enterprise's internet-facing attack surface. Key responsibilities include identifying unknown assets, managing third-party and subsidiary footprints, and translating external findings into exploitability-based prioritization. The role involves establishing asset governance practices, detecting shadow IT, and producing remediation guidance to reduce exploitable exposure. Required skills include experience with attack surface management, vulnerability management, and network security. The candidate will utilize tools such as Censys and Qualys to monitor DNS, IP space, and certificates. This role solves the business problem of shifting from traditional patching to a strategic focus on true business risk.

Skills

Attack Surface Management Vulnerability Management Cloud Security Network Security Threat and Vulnerability Management Asset Inventory Management Censys Qualys DNS Certificates CMDB Penetration Testing Cyber Threat Hunting Cyber Incident Response Third-Party Risk Management

What you'll do

  • Discover, monitor, and govern the enterprise's internet-facing attack surface and unmanaged assets.
  • Translate external attack surface findings into exposure intelligence and exploitability-based prioritization.
  • Identify attack paths starting from exposed services, misconfigurations, and weak certificates.
  • Establish asset governance practices including attribution, ownership assignment, and inventory reconciliation.
  • Detect and manage shadow IT, orphaned assets, and third-party or subsidiary footprints.
  • Produce clear remediation guidance and partner with asset owners to validate closure of exposures.
  • Build the Attack Surface Management capability from the ground up, including processes and metrics.
  • Use EASM and scanning platforms like Censys and Qualys to monitor external infrastructure.

What we're looking for

  • 3+ years of experience in attack surface management, vulnerability management, security operations, or exposure management.
  • Strong understanding of internet-facing infrastructure, including DNS, IP space, certificates, cloud hosting, and common external misconfigurations.
  • Ability to translate technical findings into business risk and practical remediation actions.
  • Hands-on experience with Censys or comparable EASM platforms (preferred).
  • Hands-on experience with Qualys or similar vulnerability scanning tools (preferred).
  • Familiarity with asset inventory/CMDB processes, cloud provider connectors, and third-party risk practices (preferred).
  • Ability to build a new capability from the ground up, including processes, metrics, and stakeholder buy-in (preferred).
  • Must be able to submit to a background investigation.

Related searches

More Attack Surface Management Service Lead Consultant jobs Remote Attack Surface Management Service Lead Consultant jobs All jobs at Allstate

More like this

Similar roles

Applications & APIs Service Lead Consultant

Allstate

Remote (IL) 5 days ago $100,000–$170,500
API Development Application Security SAST DAST OAuth OpenID Connect Microservices Secure Software Development Lifecycle Web Application Development Cloud-native Applications API Gateways Authentication Authorization Threat Modeling Session Management OWASP Top 10
Remote
Save

Lead Consultant, Infrastructure & Systems, Service

Allstate

Remote (IL) 70 days ago $100,000–$170,500
Kubernetes Docker Linux Windows Python PowerShell KQL SQL Virtualization Security Engineering Incident Response CIS Benchmarks Infrastructure Hardening Root Cause Analysis Threat Assessment
3+ yrs exp Remote
Save

Vulnerability Management Lead

Booz Allen Hamilton

Reston, VA +3 4 days ago $99,000–$225,000
ACAS Tenable.sc Nessus STIG RMF NIST 800-53 SCAP OpenSCAP Infrastructure as Code Python PowerShell SQL AWS GovCloud Azure Government ServiceNow Xacta eMASS Tableau Power BI Ansible
5+ yrs exp
Save

Head of Threat & Vulnerability Operations

State Street

Quincy, MA 84 days ago $120,000–$217,500
Threat and Vulnerability Management Attack Surface Management s as t Frontier-AI Scanning Penetration Testing Threat Intelligence Shift-Left Cloud Security Vulnerability Scoring KRIs MTTD MTTR Data Analytics Compliance Audit Security Operations Infrastructure Scanning
10+ yrs exp
Save

Senior 2 Cybersecurity Analyst, Attack Surface Management

Nordstrom

Seattle, WA 46 days ago
Attack Surface Management Python PowerShell MITRE ATT&CK Cloud Security Vulnerability Management Offensive Security PCI Network Security Threat Intelligence DevOps Asset Management System Administration AI Ethical Hacking
6+ yrs exp Hybrid
Save