Managing Engineer; Security- Hybrid

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

AIS is advancing its embedded security product strategy by launching three new engineering teams dedicated to building security controls seamlessly integrated into Allstate’s technology ecosystem. We are seeking an experienced and visionary Managing Security Engineer to lead the design, development, and delivery of our next-generation digital security products. In this role, you will create, foster, and lead a community of engineers dedicated to delivering products focused on securing Allstate’s digital ecosystem.

You will be focused on inspiring innovation while ensuring the delivery of new products within an agile environment.

This position blends technical depth, people leadership, and strategic influence. You will manage engineering resources, provide architectural and technical solutions, and ensure high performance through regular coaching and performance reviews. You are accountable for the end-to-end success of digital products, owning their performance in production and driving outcomes aligned with key KPIs.

• Lead and manage a global engineering team of engineers, overseeing recruitment, onboarding, regular one-on-one meetings, performance reviews, and career development. Inspire and influence peers, direct reports, and stakeholders to achieve business objectives and embrace change.
• Influence and innovate new solutions to challenging security problems
• Embrace approach of making collaborative, fast, local decisions; then course correct as/if needed (test/learn/iterate)
• Provide meaningful/thoughtful feedback on others as requested
• Facilitate and participate in agile ceremonies, including daily standups, inception and iteration planning, backlog refinement, and retrospectives. Collaborate closely with product managers to ensure technical input informs product scope and delivery.
• Partner in collaboration and strategy alignment across product portfolios (cross-product) in partnership with product managers, other peers and key stakeholders with the customer needs and wants in mind
• Actively contribute to software development efforts, writing, reviewing, and guiding code to ensure high-quality, scalable, and secure implementations. Balance technical leadership with hands-on coding to drive project success and mentor the team through example.
• Serves as an expert in the domain of information security engineering
• Participates in the effort of shaping the architecture and design of the product; actively helps the team in choosing the right technology, solving technical problems
• Satisfy all administrative-type requirements such as timesheets, performance management process, annual compliance, security training, etc.

• All applicants must demonstrate they have a legal right to work in the UK for employment state is not providing sponsorship for this vacancy.
• A minimum of 4 years’ experience delivering secure, scalable technology solutions with measurable impact (e.g., reduced vulnerabilities, improved system uptime).
• A minimum of 3 years hands on coding experience in production environments (Java, Python, .NET, JavaScript) with contributions that improved performance or security benchmarks.
• A minimum of 1 year’s experience operating as a ‘coach’ partnering & mentoring early in trade software engineer peers across a broader technology organization.
• Experience of Agile methodologies (especially Agile XP), including paired programming and test-driven development.
• Experience designing and maintaining automated testing and monitoring frameworks that decreased production incidents
• Experience building and optimizing CI/CD pipelines for distributed apps

• Familiarity with OWASP top 10 and MITRE attack framework
• Familiarity with Threat Modeling or…