Software Engineer - Security

Allstate is a company dedicated to protecting families and their belongings from uncertainties. They are seeking a Software Engineer to join their Information Security team to develop security controls as digital products, enhancing security within the organization and improving the developer experience of Allstate's technology ecosystem.

Responsibilities:

• Participate in the ideation of security controls that challenge the status quo and push the organization to a higher level of embedded security
• Demonstrate technical skills and aptitude needed to meet/exceed delivery velocity expectations as a full stack developer
• Actively learn different technologies as needed for delivery of stories
• Deliver on all phases of development work from initial kick-off, technical setup, application development, and support
• Embrace approach of making collaborative, fast, local decisions; then course correct as/if needed (test/learn/iterate)
• Participate in regular agile meetings (e.g., site standup, product team standup, iteration planning meeting, retrospective, lunch & learns)
• Utilize Paired programming
• Leverage Test-Driven Development
• Establish continuous integration, continuous delivery, and continuous deployment pipelines and practices
• Participate in high-level and low-level component and system designs
• Partner in collaboration and strategy alignment across product portfolios (cross-product) in partnership with product managers, other peers and key stakeholders

Requirements:

• Minimum of 3 years' experience delivering production grade applications using (Java, Python, .NET, JavaScript etc.) with measurable impact (e.g., improved performance, reduced incidents)
• Familiarity with the tools such as, Intellij-IDE or equivalent, Git, and REST APIs
• Experience building and maintaining CI/CD pipelines that reduced deployment time and increased release frequency without compromising quality
• Knowledge of Agile methodologies (especially Agile XP), including paired programming and test-driven development
• Hands on experience architecting and deploying distributed systems in the cloud including MicroServices architectures, achieving scalability and uptime targets
• Minimum of 1 year of experience coaching or mentoring engineers with evidence of improving team capability
• Proven ability to lead technical design and architecture decisions for complex, distributed systems, resulting in measurable improvements in scalability, security, or performance
• Track record of driving cross-team collaboration to deliver integrated solutions, achieving alignment across multiple product portfolios
• Familiarity with OWASP top 10 and MITRE attack framework
• Experience and knowledge in web and API security including authentication, authorization, OAuth, OWASP, OpenID, and SAML
• Experience with behavioral driven development
• Knowledge of LLMs and Machine Learning
• Knowledge of AI-assisted development tools (Copilot, Cursor) and ability to leverage them for productivity gains