Cloud Product Security Engineer

Allstate is seeking a Cloud Product Security Engineer to join its US team, delivering secure cloud‑native solutions that protect customers and business assets.

Key Responsibilities

• Design, implement, and maintain security controls for cloud‑based products and services.
• Conduct threat modeling, vulnerability assessments, and security reviews throughout the development lifecycle.
• Collaborate with product managers, developers, and operations to embed security best practices (DevSecOps) into CI/CD pipelines.
• Develop and enforce security policies, standards, and compliance frameworks for cloud environments (AWS, Azure, GCP).
• Respond to security incidents, perform root‑cause analysis, and drive remediation actions.
• Stay current on emerging cloud security trends, tools, and regulatory requirements.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 3+ years of hands‑on experience securing cloud platforms and SaaS products.
• Strong knowledge of cloud security services (IAM, encryption, VPC, security groups, CSPM, CWPP).
• Proficiency with security tooling such as SAST, DAST, container scanning, and automated compliance checks.
• Experience with scripting or programming languages (Python, Go, PowerShell) for automation.
• Relevant certifications (CISSP, CCSP, AWS Security Specialty, or similar) are a plus.

What We Offer

• Competitive salary range: $90,700 – $195,700 USD.
• Comprehensive health, dental, and vision benefits.
• Retirement savings plan with company match.
• Opportunities for continuous learning, certifications, and career advancement.
• Inclusive culture that values teamwork, innovation, and community impact.

Frequently Asked Questions

What does a Cloud Product Security Engineer do at Allstate?

You will design and implement security controls for cloud‑based products, conduct threat assessments, and work with cross‑functional teams to embed security into development and operations.

What experience is required for this role?

At least 3 years of hands‑on cloud security experience, strong knowledge of AWS/Azure/GCP security services, and proficiency with security automation tools and scripting.

What is the salary range for this position?

The annual salary ranges from $90,700 to $195,700, depending on experience and qualifications.