[Hiring] Cyber Security Exposure Response Lead @Allstate

Role Description

The Exposure Response team operates within a newly established Exposure Management function in the broader cybersecurity organization, focused on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities.

• Shifting from traditional patch approaches to a more strategic focus on true business risk and exploitability.
• Aligns more closely with security operations than traditional vulnerability scanning.
• Evaluates newly disclosed CVEs, zero-days, KEVs, and critical exposures.
• Determines enterprise impact and continuously refines scope.
• Coordinates remediation and drives events toward risk reduction.

The role: Senior hands-on technical operator responsible for protecting the enterprise from critical vulnerability and exposure risk. This role combines:

• Advanced technical investigation, threat-hunting, and incident-response techniques.
• Incident Command, cross-functional coordination, and analyst development.

When investigation identifies potential or active compromise, the Lead engages the appropriate SOC and Incident Response teams and provides the technical context needed to support their response. This isn't a traditional vulnerability scanning role; you'll work in situations where the answer may not yet be known, the scope may change as evidence emerges, and timely technical judgment matters.

Qualifications

• 5+ years of cybersecurity or technology operations experience involving technical investigation, coordination, escalation, and resolution.
• Demonstrated ability to lead or coordinate high-priority, fast-moving operational events and make sound decisions with incomplete or changing information.
• Strong hands-on technical and investigative skills, with the ability to correlate multiple data sources, test assumptions, establish scope and impact, and determine required actions.
• Ability to coordinate across technical teams without direct authority and drive issues toward resolution.
• Experience mentoring, training, or providing technical guidance to developing analysts.

Requirements

• Experience in Security Operations, Incident Response, Threat Hunting, network operations, infrastructure operations, or another high-tempo technical operations environment.
• Experience applying threat-hunting or incident-response investigative techniques to events where scope and impact evolved during the investigation.
• Experience leading significant security or technical events, including Incident Command.
• Familiarity with enterprise vulnerability, endpoint, cloud, asset, network, or exposure-management technologies.

Benefits

• Compensation offered for this role is $100,000.00 - $170,500.00 annually and is based on experience and qualifications.
• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.
• Monthly connectivity reimbursement for employees eligible to work from home.

Company Description

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. For more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs.