Platform Consultant, Threat Modeling

Allstate

Confirmed live 2 days ago High trust
Remote

Quick summary

Work type
Remote
Location
IL
Salary
$90,700–$195,700 / yr
Posted
66 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $178k
This role $143k
$75k most similar roles pay here $241k

This role pays less than 73% of similar roles. Most pay $142,450–$213,600 — the shaded band above. At the midpoint, this role pays about $143k versus about $178k for comparable roles.

Based on 239 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 36 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 36 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Platform Consultant, Threat Modeling

Platform Consultant - Threat Modeling serves as a senior security consultant within the Product Security Engineering team, where they drive secure-by-design principles across enterprise technology platforms. The role involves leading threat modeling engagements for various applications and business domains to identify risks early in the development lifecycle while influencing architectural decisions and platform security strategies. You will collaborate with engineering, architecture, and security operations teams to provide risk-based recommendations that balance security with developer experience. Key responsibilities include facilitating discovery workshops, mentoring engineers on systems thinking, and championing initiatives like AI, API, and SaaS security. Required expertise includes threat modeling methodologies such as STRIDE or Attack Trees, cloud platforms like AWS, Azure, or GCP, and modern software practices including CI/CD and Agile. Technical skills involve experience with Java, Python, Go, or Rust in complex enterprise environments.

What you'll do

  • Lead and facilitate threat modeling engagements across multiple applications to identify and mitigate security risks early in the development lifecycle.
  • Provide expert guidance to engineering teams on secure architecture, platform design, and threat modeling practices.
  • Embed secure-by-design principles into software delivery processes from initial discovery through production deployment.
  • Define and influence platform security strategies and architectural decisions with both technical and non-technical stakeholders.
  • Develop risk-based security recommendations that balance security requirements with business objectives and developer experience.
  • Drive the adoption of modern engineering practices, including reusable security patterns and architectural standards.
  • Collaborate with Security Operations to improve threat detection capabilities and breach modeling initiatives.
  • Mentor engineers and technical leaders on systems thinking, threat identification, and secure design methodologies.

What we're looking for

  • Must have 3+ years of experience in software engineering, security engineering, solution architecture, technical project management, or platform engineering.
  • Experience acting as a technical advisor, consultant, architect, or security partner for engineering teams is required.
  • Must possess a deep understanding of threat modeling methodologies such as STRIDE, Attack Trees, Kill Chains, or equivalent frameworks.
  • Demonstrated experience identifying and mitigating security threats in cloud-native, distributed, API-driven, or enterprise applications is required.
  • Practical experience with modern software development practices including CI/CD, source control, automated testing, and Agile delivery is required.
  • Working knowledge of cloud platforms such as AWS, Azure, or GCP and associated security considerations is required.
  • Desirable skills include knowledge of OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, and identity management concepts.
  • Candidates must be able to pass a background investigation.

More like this

Similar roles

Platform Consultant, Technology Risk & Compliance

Allstate

Remote (IL) 79 days ago $160,000$230,000
Zero Trust Architecture CI/CD Docker Kubernetes AWS Azure Java JavaScript Spring Boot RESTful APIs OpenAPI Swagger TDD BDD Go Rust F# Elixir Haskell Clojure OWASP Top 10 MITRE ATT&CK OAuth 2.0 OpenID Connect SAML AES TLS Argon2
8+ yrs exp Remote

Platform Consultant, Product Security

Allstate

Remote (IL) 154 days ago $160,000$230,000
Java JavaScript Go Rust F# Elixir Haskell Clojure AWS Azure Docker Kubernetes CI/CD DevOps TDD BDD Spring Boot RESTful APIs OpenAPI Swagger Git GitHub Zero Trust Architecture OWASP Top 10 MITRE ATT&CK OAuth 2.0 OpenID Connect SAML AES TLS Argon2
8+ yrs exp Remote

Platform Architect, Security

Apple Inc

Austin, TX 100 days ago
Threat Modeling Secure Boot Secure Update Secure Communication Public Key Infrastructure Biometrics Smart Cards Virtualization Confidential Computing Python C Unix Shell Scripting AI Security Architecture
10+ yrs exp

SAP Platform Security Consultant

Accenture

Chicago, IL +4 35 days ago $70,350$205,800
SAP S/4HANA Fiori SAP BTP SAP GRC HANA DB Identity and Access Management Security Analytics Source Code Analysis Vulnerability Management Onapsis Security Bridge Role-Based Access Control Segregation of Duties
10+ yrs exp

Lead Security Engineer, Threat Modeling

JPMorgan Chase

Plano, TX 32 days ago
Cybersecurity Threat Modeling SDLC System Design Application Development AWS GCP AI Machine Learning Network Security Risk Management Security Testing
5+ yrs exp