Platform Consultant (Multiple Levels) - Hybrid

At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Your role in the team For this opportunity, the business is flexible to hire at Sr Consultant II, Lead Consultant, and Expert level depending on experience & interview evaluation. Product Security Engineering designs, builds, and operates enterprise security capabilities that integrate directly into cloud platforms, software development life cycles, and enterprise engineering practices. The organisation applies modern engineering approaches to embed security early in the development process, enabling teams to deliver secure, resilient, and scalable technology solutions.

The Threat Modeling
- Platform Consultant is a senior security consultant responsible for driving the adoption of secure-by-design principles across enterprise technology platforms through the application of advanced threat modeling practices. The role focuses on embedding threat modeling into both new and existing applications, influencing architectural decisions, improving security posture, and guiding engineering organizations through complex security challenges. Working across Product Security, Engineering, Security Operations, and Architecture teams, the consultant helps ensure security is treated as a foundational element of platform design rather than a downstream activity.

Key responsibilities:

Serve as a trusted security consultant to engineering teams, providing guidance on secure architecture, platform design, and threat modeling practices Lead and facilitate threat modeling engagements across multiple applications, platforms, and business domains to identify and mitigate security risks early in the development lifecycle Embed secure-by-design principles into software delivery processes, ensuring security considerations are incorporated At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties.

And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Your role in the team For this opportunity, the business is flexible to hire at Sr Consultant II, Lead Consultant, and Expert level depending on experience & interview evaluation. Product Security Engineering designs, builds, and operates enterprise security capabilities that integrate directly into cloud platforms, software development life cycles, and enterprise engineering practices. The organisation applies modern engineering approaches to embed security early in the development process, enabling teams to deliver secure, resilient, and scalable technology solutions.

The Threat Modeling
- Platform Consultant is a senior security consultant responsible for driving the adoption of secure-by-design principles across enterprise technology platforms through the application of advanced threat modeling practices. The role focuses on embedding threat modeling into both new and existing applications, influencing architectural decisions, improving security posture, and guiding engineering organizations through complex security challenges. Working across Product Security, Engineering, Security Operations, and Architecture teams, the consultant helps ensure security is treated as a foundational element of platform design rather than a downstream activity.

Key responsibilities:

Serve as a trusted security consultant to engineering teams, providing guidance on secure architecture, platform design, and threat modeling practices Lead and facilitate threat modeling engagements across multiple applications, platforms, and business domains to identify and mitigate security risks early in the development lifecycle Embed secure-by-design principles into software delivery processes, ensuring security considerations are incorporated from discovery through production deployment Define, communicate, and influence platform security strategies and architectural decisions with both technical and non-technical stakeholders Partner with engineering, architecture, and security teams to develop risk-based security recommendations that balance security, business objectives, and developer experience Collaborate with Security Operations and Product Security teams to improve threat detection capabilities, breach modeling initiatives, and security resilience Facilitate architectural reviews, discovery workshops, and threat modeling sessions that enable teams to make informed security decisions Champion…