Key Responsibilities  

• Design, build, and operate cloud‑native security controls as software products across cloud infrastructure, data platforms, and application services 

• Engineer and maintain cloud security posture management (CSPM) and data loss prevention (DLP) capabilities to continuously detect, assess, and reduce risk in cloud environments 

• Build preventative, detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services 

• Integrate cloud security controls with SIEM and security tooling to generate high‑quality signals for detection, investigation, and incident response 

• Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery 

• Apply modern cloud and software engineering practices (e.g., infrastructure as code, automated testing, CI/CD) to ensure security controls are reliable, scalable, and maintainable 

• Collaborate with platform engineers, application teams, and Digital Product Managers to align cloud security controls with architectures and developer workflows 

Essential Skills:  

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy.

• A minimum of 3+ years of professional software or security engineering experience, including ownership of production systems in cloud environments. 

• Hands‑on experience engineering security controls within public cloud platforms (e.g., AWS and/or Azure), spanning infrastructure, platform services, or application‑level integrations. 

• Background building or integrating cloud security posture management (CSPM), data protection, or data loss prevention (DLP) capabilities as engineered solutions.

• Understanding of cloud‑native architectures and services (e.g., identity, networking, storage, compute) and how security controls integrate into them. 

• Capability to engineer preventative, detective, and responsive security capabilities, including detection logic, automation, or response workflows.

• Practical application of modern engineering practices such as infrastructure as code, automated testing, CI/CD, and operational feedback loops.

• Ability to collaborate effectively with platform engineers, application teams, and security partners to deliver cloud security outcomes. 

Desirable Skills 

Supervisory Responsibilities:  

• This role has supervisory responsibilities and serves as the first level manager for a team of engineers. 

Posting Closing date: Thursday 3rd September 2026 {11.59pm}