Lead Consultant – Attack Surface Management, Exposure Intelligence

Allstate

. Discover, monitor, and govern Allstate’s internet-facing attack surface, including unknown and unmanaged assets, external exposures, and third-party and subsidiary footprints .

Posted 10/15/2026full-timeRemote • United StatesSenior💰 $100,000 - $170,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in attack surface management and vulnerability management, with a strong understanding of internet-facing infrastructure and the ability to translate technical findings into actionable business risk assessments. Proficient in utilizing EASM platforms and vulnerability scanning tools to enhance security posture and drive remediation efforts.

Highest-signal resume keywords

Attack Surface ManagementVulnerability ManagementCensysQualysInternet-Facing Infrastructure

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Attack Surface ManagementVulnerability ManagementExposure ManagementInternet-Facing InfrastructureDNSIP SpaceCertificatesCloud HostingExternal MisconfigurationsRemediation Guidance

Soft Skills

Stakeholder Buy-InCommunicationCollaboration

Tools & Technologies

CensysQualysEASM Platforms

Certifications & Qualifications

Background Investigation

Industry Keywords

Asset GovernanceShadow ITOrphaned AssetsThird-Party RiskCMDB Processes

Tech Stack

Tools & technologies

CloudDNS

About the role

Key responsibilities & impact

Discover, monitor, and govern Allstate’s internet-facing attack surface, including unknown and unmanaged assets, external exposures, and third-party and subsidiary footprints
Establish attack surface management practices and apply CTEM principles to connect external findings to real attack paths
Partner with asset owners to drive remediation that measurably reduces exploitable exposure
Translate external attack surface findings into exposure intelligence and exploitability-based prioritization
Identify attack paths originating from internet-facing assets, including exposed services, misconfigurations, expired or weak certificates, and exposed admin interfaces
Produce remediation guidance and partner with asset owners to validate closure
Own SME coverage for external attack surface discovery and monitoring using EASM and scanning platforms such as Censys and Qualys
Establish asset governance practices, including attribution, ownership assignment, inventory reconciliation, and detection of shadow IT and orphaned assets
Extend visibility to third-party, subsidiary, and cloud-hosted footprints
Partner with Penetration Testing, Product Security, and Exposure Response to operationalize findings

Requirements

What you’ll need

3+ years in attack surface management, vulnerability management, security operations, or exposure management
Strong understanding of internet-facing infrastructure, including DNS, IP space, certificates, cloud hosting, and common external misconfigurations
Ability to translate technical findings into business risk and practical remediation actions
Hands-on experience with Censys or comparable EASM platforms, and with Qualys or similar vulnerability scanning tools
Familiarity with asset inventory/CMDB processes, cloud provider connectors, and third-party risk practices
Ability to build a new capability from the ground up, including processes, metrics, and stakeholder buy-in
Required background investigation
Allstate generally does not sponsor individuals for employment-based visas for this position
Dedicated, private workspace free from distractions when working from home
Reliable internet with minimum speeds of 50 MB download and 5 MB upload

Benefits

Comp & perks

Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse
Monthly connectivity reimbursement to help offset internet costs