Platform Consultant – Threat Modeling

🕒 July 8

🇺🇸 United States – Remote

💵 $90.7k - $195.7k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Allstate

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1931

💼 Consulting

📦 Logistics

🛡️ Insurance

💰 Post-IPO Equity on 2014-01

Consulting • Logistics • Insurance

Allstate is an industry leader in providing insurance solutions, focusing on home, auto, device, and identity protection. With a commitment to customer well-being, Allstate aims to instill peace of mind and financial security for its customers. The company also emphasizes community impact and sustainability through various initiatives, showcasing their dedication to social responsibility and positive change.

📋 Description

• Serve as a trusted security consultant to engineering teams. • Lead and facilitate threat modeling engagements across multiple applications, platforms, and business domains. • Embed secure-by-design principles into software delivery processes. • Define, communicate, and influence platform security strategies and architectural decisions. • Partner with engineering, architecture, and security teams to develop risk-based security recommendations. • Drive the adoption of modern engineering and security practices. • Collaborate with Security Operations and Product Security teams to improve threat detection capabilities. • Mentor engineers and technical leaders on security architecture principles and secure design methodologies.

🎯 Requirements

• 3+ years' experience in software engineering, security engineering, solution architecture, technical project management, or platform engineering roles within complex enterprise environments. • Deep understanding of threat modeling methodologies such as STRIDE, Attack Trees, Kill Chains, or equivalent risk assessment frameworks. • Demonstrated experience identifying, documenting, and mitigating security threats within cloud-native, distributed, API-driven, or enterprise applications. • Practical experience with modern software development practices including CI/CD, source control, automated testing, and Agile delivery methodologies. • Working knowledge of cloud platforms such as AWS, Azure, or GCP and associated security considerations.

🏖️ Benefits

• Comprehensive technology setup including a laptop, monitors, headset, keyboard, and mouse. • Monthly connectivity reimbursement to help offset internet costs.