below marketmost similar roles pay hereabove market
This role pays less than
69%
of similar roles. Most pay
$137,806–$216,075
— the blue band above.
At the midpoint, this role pays about
$143k
versus about
$177k
for comparable roles.
Based on 240 similar postings.
Employer
About Allstate
The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.
Allstate currently has
52 open roles
on FindRole.
Listed pay typically runs
$100,000–$170,500
across 51 roles with salary data.
JOB TITLE: Platform Consultant - Threat Modeling
The Platform Consultant - Threat Modeling joins the Product Security Engineering team to drive secure-by-design principles across enterprise technology platforms. This role involves leading threat modeling engagements for new and existing applications to identify and mitigate security risks early in the development lifecycle. You will serve as a technical advisor to engineering teams, influencing architectural decisions and embedding security into software delivery processes. Key responsibilities include facilitating discovery workshops, defining platform security strategies, and mentoring technical leaders on systems thinking. Required skills include experience in software engineering, solution architecture, or platform engineering, with deep knowledge of STRIDE, Attack Trees, and Kill Chains. You will work with cloud-native, API-driven applications using AWS, Azure, or GCP, while applying Agile methodologies, CI/CD practices, and frameworks like OWASP Top 10 and NIST.
Lead and facilitate threat modeling engagements across multiple applications and platforms to identify and mitigate security risks.
Provide technical guidance to engineering teams on secure architecture, platform design, and threat modeling practices.
Embed secure-by-design principles into the software delivery process from discovery through production deployment.
Define and influence platform security strategies and architectural decisions with technical and non-technical stakeholders.
Develop risk-based security recommendations that balance security requirements with business objectives and developer experience.
Drive the adoption of reusable security patterns, architectural standards, and secure development frameworks.
Collaborate with Security Operations to improve threat detection capabilities and security resilience.
Mentor engineers and technical leaders on systems thinking, threat identification, and secure design methodologies.
What we're looking for
3+ years' experience in software engineering, security engineering, solution architecture, technical project management, or platform engineering roles within complex enterprise environments.
Experience acting as a technical advisor, consultant, architect, or security partner supporting engineering teams during design and implementation activities.
Deep understanding of threat modeling methodologies such as STRIDE, Attack Trees, Kill Chains, or equivalent risk assessment frameworks.
Demonstrated experience identifying, documenting, and mitigating security threats within cloud-native, distributed, API-driven, or enterprise applications.
Practical experience with modern software development practices including CI/CD, source control, automated testing, and Agile delivery methodologies.
Working knowledge of cloud platforms such as AWS, Azure, or GCP and associated security considerations.
Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML (preferred).
Google Cloud
BigQuery
APIs
CI/CD
Data Engineering
Full Stack
Workflow Orchestration
Git
Observability
Cybersecurity
Data Pipelines
Production Systems
Testing
Automation
SAP
S/4HANA
Fiori
SAP BTP
SAP GRC
HANA DB
Identity and Access Management
Security Analytics
Source Code Analysis
Vulnerability Management
Onapsis
Security Bridge
Role-Based Access Control
Segregation of Duties