Security Engineer

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. 

Job Description

The Security Engineer partners in designing and building security solutions that will balance the need for speed and flexibility of the infrastructure and IaaS/PaaS/SaaS applications, with the need to protect Allstate against ongoing and potential security threats. This role needs to have the aptitude to understand new security strategies.

Key Responsibilities

• Actively learn different technologies as needed for delivery of stories

• Adhere to Allstate best practices (for example, pair programming and test-driven development) and hold others accountable for the same

• Establishes continuous integration, continuous delivery, and continuous deployment pipelines and practices

• Deliver on all phases of development work from initial kick-off, technical setup, application development, and support

• Serve as a leader in all dimensions of the work:  people, process, technology

• Embrace approach of making collaborative, fast, local decisions; then course correct as/if needed (test/learn/iterate)

• Active participation in regular agile meetings (e.g., site standup, product team standup, iteration planning meeting, retrospective, lunch & learns)

• Actively work to transfer knowledge of Allstate development practices and technical skills to other people (including delivery areas) to grow adoption

• Receive constructive criticism and take necessary steps to improve where/when needed

• If there is bench time, leverage it to work on any assigned projects and/or for self-study to advance technical skills

• Developed code should promote principles of 12 factor apps, availability, scalability, maintainability and security

• This job does not have supervisory duties

Key Qualifications

• 2+ years technology development and implementation experience

• Knowledge of Agile methodologies (especially Agile XP), including paired programming and test driven development

• Excellent Java and/or JavaScript coding background including familiarity with the following tools:
    - IntelliJ - IDEA
    - Github
    - Spring Framework
    - AngularJS or ReactJS
    - Microsoft SQL Server or MongoDB

• Familiarity with the following is a plus:
    - Threat Modeling
    - Security Testing
    - Jenkins
    - nodeJS

• Undergraduate degree in software engineering or computer science

• Entrepreneurial with a strong technical skill

• Passionate about technical topics such as computer languages and frameworks, mobility and Internet of Things

• Able to translate complex user stories into a good technical code and deliver it effectively

#LI-JJ1
 

Skills

Agile Methodology, DevOps, Infrastructure as a Service (IaaS), IT Problem Solving, IT Security Operations, Java, JavaScript, Jenkins (Software), React.js, Scripting, Security Engineering, Security Policies, Software Development, Threat Modeling, Troubleshooting

Compensation

Compensation offered for this role is $61,000.00 - 106,210.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

Allsta