Lead Consultant – Attack Surface Management, Exposure Intelligence

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $100k - $170.5k / year

⏰ Full Time

🟠 Senior

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Allstate

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1931

💼 Consulting

📦 Logistics

🛡️ Insurance

💰 Post-IPO Equity on 2014-01

Consulting • Logistics • Insurance

Allstate is an industry leader in providing insurance solutions, focusing on home, auto, device, and identity protection. With a commitment to customer well-being, Allstate aims to instill peace of mind and financial security for its customers. The company also emphasizes community impact and sustainability through various initiatives, showcasing their dedication to social responsibility and positive change.

📋 Description

• Discover, monitor, and govern Allstate’s internet-facing attack surface, including unknown and unmanaged assets, external exposures, and third-party and subsidiary footprints • Establish attack surface management practices and apply CTEM principles to connect external findings to real attack paths • Partner with asset owners to drive remediation that measurably reduces exploitable exposure • Translate external attack surface findings into exposure intelligence and exploitability-based prioritization • Identify attack paths originating from internet-facing assets, including exposed services, misconfigurations, expired or weak certificates, and exposed admin interfaces • Produce remediation guidance and partner with asset owners to validate closure • Own SME coverage for external attack surface discovery and monitoring using EASM and scanning platforms such as Censys and Qualys • Establish asset governance practices, including attribution, ownership assignment, inventory reconciliation, and detection of shadow IT and orphaned assets • Extend visibility to third-party, subsidiary, and cloud-hosted footprints • Partner with Penetration Testing, Product Security, and Exposure Response to operationalize findings

🎯 Requirements

• 3+ years in attack surface management, vulnerability management, security operations, or exposure management • Strong understanding of internet-facing infrastructure, including DNS, IP space, certificates, cloud hosting, and common external misconfigurations • Ability to translate technical findings into business risk and practical remediation actions • Hands-on experience with Censys or comparable EASM platforms, and with Qualys or similar vulnerability scanning tools • Familiarity with asset inventory/CMDB processes, cloud provider connectors, and third-party risk practices • Ability to build a new capability from the ground up, including processes, metrics, and stakeholder buy-in • Required background investigation • Allstate generally does not sponsor individuals for employment-based visas for this position • Dedicated, private workspace free from distractions when working from home • Reliable internet with minimum speeds of 50 MB download and 5 MB upload

🏖️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse • Monthly connectivity reimbursement to help offset internet costs