Exposure Intelligence Analyst – Applications & APIs, OWASP, SAST-DAST, Auth

🕒 August 4

🇺🇸 United States – Remote

💵 $100k - $170.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🕵️ Threat Intelligence Specialist

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Allstate

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1931

💼 Consulting

📦 Logistics

🛡️ Insurance

💰 Post-IPO Equity on 2014-01

Consulting • Logistics • Insurance

Allstate is an industry leader in providing insurance solutions, focusing on home, auto, device, and identity protection. With a commitment to customer well-being, Allstate aims to instill peace of mind and financial security for its customers. The company also emphasizes community impact and sustainability through various initiatives, showcasing their dedication to social responsibility and positive change.

📋 Description

• Translate application findings into exposure intelligence and exploitability-based prioritization • Identify attack paths involving authentication flaws, insecure APIs, weak session handling, and privilege boundaries • Produce clear remediation guidance and partner with application owners to validate closure • Own SME coverage for web, application, and API exposure, including OWASP-class risks and API misuse patterns • Identify systemic patterns such as broken authentication, insecure direct object references, injection paths, weak access controls, and insecure secrets handling • Partner with development teams and AppSec stakeholders to improve secure patterns and reduce recurring exposure creation • Connect findings to real attack paths using CTEM principles • Drive remediation that measurably reduces exploitable exposure

🎯 Requirements

• 3+ years in application security, AppSec engineering, security operations, or exposure management • Understanding of web security fundamentals and common API/application attack patterns • Ability to translate technical findings into business risk and practical engineering fixes • Experience with SAST/DAST tools, vulnerability triage, and secure SDLC concepts preferred • Familiarity with modern authentication patterns such as OAuth/OIDC, API gateways, and microservices preferred • Strong collaboration skills with engineering organizations and ability to drive measurable change preferred • Candidate(s) offered this position must submit to a background investigation • Allstate generally does not sponsor individuals for employment-based visas for this position • Remote employees must have a dedicated, private workspace free from distractions • Reliable internet required, with minimum speeds of 50 MB download and 5 MB upload

🏖️ Benefits

• Comprehensive technology setup including a laptop, monitors, headset, keyboard, and mouse • Monthly connectivity reimbursement to help offset internet costs • Opportunity to challenge the status quo and shape the future of protection • Environment fostering innovative thinking • Meaningful work supporting customers and communities