Managing Engineer - Security

Allstate Insurance Co. is advancing its embedded security product strategy by launching new engineering teams dedicated to building security controls. The Managing Security Engineer will lead the design, development, and delivery of next-generation digital security products while managing a global engineering team and ensuring high performance.

Responsibilities:

• Lead and manage a global engineering team of engineers, overseeing recruitment, onboarding, regular one-on-one meetings, performance reviews, and career development. Inspire and influence peers, direct reports, and stakeholders to achieve business objectives and embrace change
• Influence and innovate new solutions to challenging security problems
• Embrace approach of making collaborative, fast, local decisions; then course correct as/if needed (test/learn/iterate)
• Provide meaningful/thoughtful feedback on others as requested
• Facilitate and participate in agile ceremonies, including daily standups, inception and iteration planning, backlog refinement, and retrospectives. Collaborate closely with product managers to ensure technical input informs product scope and delivery
• Partner in collaboration and strategy alignment across product portfolios (cross-product) in partnership with product managers, other peers and key stakeholders with the customer needs and wants in mind
• Actively contribute to software development efforts, writing, reviewing, and guiding code to ensure high-quality, scalable, and secure implementations. Balance technical leadership with hands-on coding to drive project success and mentor the team through example
• Serve as an expert in the domain of information security engineering
• Participate in the effort of shaping the architecture and design of the product; actively helps the team in choosing the right technology, solving technical problems
• Satisfy all administrative-type requirements such as timesheets, performance management process, annual compliance, security training, etc

Requirements:

• A minimum of 4 years' experience delivering secure, scalable technology solutions with measurable impact (e.g., reduced vulnerabilities, improved system uptime)
• A minimum of 3 years hands on coding experience in production environments (Java, Python, .NET, JavaScript) with contributions that improved performance or security benchmarks
• A minimum of 1 years' experience operating as a ‘coach' partnering & mentoring early in trade software engineer peers across a broader technology organization
• Experience of Agile methodologies (especially Agile XP), including paired programming and test-driven development
• Experience designing and maintaining automated testing and monitoring frameworks that decreased production incidents
• Experience building and optimizing CI/CD pipelines for distributed apps
• Familiarity with OWASP top 10 and MITRE attack framework
• Familiarity with Threat Modeling or industry threat modeling frameworks such as STRIDE
• Experience and knowledge in web and API security including authentication, authorization, OAuth, OWASP, OpenID, and SAML
• Experience with behavioral driven development
• Knowledge of LLMs and Machine Learning
• Knowledge of AI-assisted development tools (Copilot, Cursor) and ability to leverage them for productivity gains