[Hiring] Infrastructure & Systems, Service (Lead) Consultant - Exposure Intelligence @Allstate

Role Description

Service (Lead) Consultant - Exposure Intelligence, Infrastructure & Systems (Servers / Containers / K8s / OS)

The team operates within a newly established Exposure Management function in the broader cybersecurity organization, focused on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities shifting from traditional patch approaches to a more strategic focus on true business risk and exploitability.

The Exposure Intelligence Analyst – Infrastructure & Systems serves as the domain-aligned SME responsible for identifying, analyzing, and prioritizing exposure risk across enterprise compute platforms, including:

• Servers
• Virtualization
• Containers
• Kubernetes
• Operating system hardening

This role operates within a CTEM model by turning technical findings into actionable exposure intelligence and partnering with engineering SMEs to accelerate risk reduction.

What’s exciting about this role:

• Directly identify and reduce real exposure across core infrastructure by validating exploitability and eliminating attack paths across servers, containers, and OS platforms.
• Leverage AI-assisted analysis to focus on high-signal, high-impact risk.

Qualifications

• Experienced infrastructure SME with a strong background in servers, operating systems, and platform engineering (Windows/Linux, virtualization, containers, Kubernetes).
• Brings years of hands-on experience securing or building or operating core systems.
• Demonstrable experience within Server and OS platforms (Windows, Linux), Containers and orchestration (Docker, Kubernetes), Infrastructure hardening and system-level security controls.

Requirements

• 3+ years in security engineering, infrastructure engineering, vulnerability/exposure management, or related cyber operations.
• Hands-on knowledge of server/OS hardening, virtualization concepts, and container/Kubernetes fundamentals.
• Ability to interpret technical telemetry and translate into actionable risk decisions.

Preferred Qualifications

• Experience with Kubernetes security controls, container runtime security, CIS benchmarks, and secure configuration management.
• Scripting/query skills (PowerShell, Python, KQL, SQL) to enrich/validate exposure hypotheses.
• Familiarity with attack techniques affecting infra layers (privilege escalation, lateral movement, persistence).

Skills

• Cyber Incident Response
• Docker (Software)
• Incident Response
• Infrastructure Protection
• IT Security Operations
• Kubernetes
• Linux
• Operating Systems (OS)
• Remediation
• Root Cause Analysis (RCA)
• Security Controls
• Security Engineering
• Server Infrastructure
• Systems Hardening
• Threat Assessment
• Virtualization

Compensation

Compensation offered for this role is $100,000.00 - $170,500.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.
• Monthly connectivity reimbursement for eligible employees working from home.
• Requirements for remote work include a dedicated, private workspace, reliable internet with minimum speeds of 50 MB download and 5 MB upload.