Managing Engineer - Security

AllstateMcCullom Lake, IL
$120,000 - $195,000

About The Position

Allstate Cybersecurity & Controls (ACC) is advancing its embedded security product strategy by launching three new engineering teams dedicated to building security controls seamlessly integrated into Allstate’s technology ecosystem. We are seeking an experienced and visionary Managing Security Engineer to lead the design, development, and delivery of our next-generation digital security products. In this role, you will create, foster, and lead a community of engineers dedicated to delivering products focused on securing Allstate’s digital ecosystem. You will be focused on inspiring innovation while ensuring the delivery of new products within an agile environment. This position blends technical depth, people leadership, and strategic influence. You will manage engineering resources, provide architectural and technical solutions, and ensure high performance through regular coaching and performance reviews. You are accountable for the end-to-end success of digital products, owning their performance in production and driving outcomes aligned with key KPIs.

Requirements

  • A minimum of 4 years’ experience delivering secure, scalable technology solutions with measurable impact (e.g., reduced vulnerabilities, improved system uptime).
  • A minimum of 3 years hands on coding experience in production environments (Java, Python, .NET, JavaScript) with contributions that improved performance or security benchmarks.
  • A minimum of 1 years’ experience operating as a ‘coach’ partnering & mentoring early in trade software engineer peers across a broader technology organization.
  • Experience of Agile methodologies (especially Agile XP), including paired programming and test-driven development.
  • Experience designing and maintaining automated testing and monitoring frameworks that decreased production incidents.
  • Experience building and optimizing CI/CD pipelines for distributed apps.

Nice To Haves

  • Familiarity with OWASP top 10 and MITRE attack framework.
  • Familiarity with Threat Modeling or industry threat modeling frameworks such as STRIDE.
  • Experience and knowledge in web and API security including authentication, authorization, OAuth, OWASP, OpenID, and SAML.
  • Experience with behavioral driven development.
  • Knowledge of LLMs and Machine Learning.
  • Knowledge of AI-assisted development tools (Copilot, Cursor) and ability to leverage them for productivity gains.

Responsibilities

  • Lead and manage a global engineering team of engineers, overseeing recruitment, onboarding, regular one-on-one meetings, performance reviews, and career development.
  • Inspire and influence peers, direct reports, and stakeholders to achieve business objectives and embrace change.
  • Influence and innovate new solutions to challenging security problems.
  • Embrace approach of making collaborative, fast, local decisions; then course correct as/if needed (test/learn/iterate).
  • Provide meaningful/thoughtful feedback on others as requested.
  • Facilitate and participate in agile ceremonies, including daily standups, inception and iteration planning, backlog refinement, and retrospectives.
  • Collaborate closely with product managers to ensure technical input informs product scope and delivery.
  • Partner in collaboration and strategy alignment across product portfolios (cross-product) in partnership with product managers, other peers and key stakeholders with the customer needs and wants in mind.
  • Actively contribute to software development efforts, writing, reviewing, and guiding code to ensure high-quality, scalable, and secure implementations.
  • Balance technical leadership with hands-on coding to drive project success and mentor the team through example.
  • Serve as an expert in the domain of information security engineering.
  • Participate in the effort of shaping the architecture and design of the product; actively helps the team in choosing the right technology, solving technical problems,
  • Satisfy all administrative-type requirements such as timesheets, performance management process, annual compliance, security training, etc.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service