[Hiring] Exposure Intelligence Analyst – Infrastructure & Systems (Servers / Containers / K8s / OS) @Allstate

Role Description

The Exposure Intelligence Analyst – Infrastructure & Systems serves as the domain-aligned SME responsible for identifying, analyzing, and prioritizing exposure risk across enterprise compute platforms, including servers, virtualization, containers, Kubernetes, and operating system hardening.

• Directly identify and reduce real exposure across core infrastructure by validating exploitability and eliminating attack paths across servers, containers, and OS platforms, leveraging AI-assisted analysis to focus on high-signal, high-impact risk.

Qualifications

• Experienced infrastructure SME with a strong background in servers, operating systems, and platform engineering (Windows/Linux, virtualization, containers, Kubernetes).
• Brings years of hands-on experience securing or building or operating core systems and is able to translate that experience into identifying, validating, and reducing real, exploitable infrastructure exposures.
• Demonstrable experience within Server and OS platforms (Windows, Linux), Containers and orchestration (Docker, Kubernetes), Infrastructure hardening and system-level security controls.

Requirements

• 3+ years in security engineering, infrastructure engineering, vulnerability/exposure management, or related cyber operations.
• Hands-on knowledge of server/OS hardening, virtualization concepts, and container/Kubernetes fundamentals.
• Ability to interpret technical telemetry and translate into actionable risk decisions.

Benefits

• Compensation offered for this role is $100,000.00 - $170,500.00 annually and is based on experience and qualifications.
• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.
• Monthly connectivity reimbursement for employees eligible to work from home.

Success Measures

• Reduction in exploitable infra-layer exposure (misconfigs, weak baselines, patch gaps).
• Improved prioritization accuracy (less noise, more real risk).
• Faster mitigation outcomes through SME-to-SME partnering with platform engineering.

Key Responsibilities

• Analyze exposure signals (vulnerabilities, misconfigurations, control gaps) and translate them into exploitable exposure hypotheses.
• Correlate findings across sources to identify attack paths and high-impact exposure conditions.
• Prioritize work based on exploitability, blast radius, and business impact; produce clear remediation guidance.
• Own SME coverage for servers (Windows/Linux), hypervisors, containers, and Kubernetes platforms.
• Identify systemic risks: insecure baselines, patching gaps, insecure container images, cluster misconfigurations, weak segmentation at the host layer, privilege pathways.
• Partner with platform teams to validate remediation effectiveness and ensure durable hardening outcomes.