Autonomous Penetration testing Lead Consultant
About the role
At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.
Job Description
Role: Autonomous Penetration testing Lead Consultant
Job Profile & Family: Lead Consultant- Threat & Incident Response
Team and overall work scope
- The team operates within a newly established Exposure Management function in the broader cybersecurity organization, focused on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities shifting from traditional patch approaches to a more strategic focus on true business risk and exploitability
•
Individual Contributor/ Lead Consultant roles are designed to bring in deep respective domain expertise
to bridge the gap between security insights and practical remediation strategies
- The Autonomous Penetration testing Engineer is
responsible for building and operating automated adversarial testing capabilities,
Success Measures
- Increased automation coverage of Penetration testing activities
- Reduction in manual testing effort
- Faster validation of exploitability and remediation effectiveness
Key Responsibilities
- Design and build autonomous Penetration testing pipelines and tooling
- Integrate adversarial testing into CI/CD and enterprise workflows
- Automate attack path validation and exploit verification
- Partner with Exposure Intelligence and Response teams to validate risk
- Continuously improve testing coverage and scalability
Required Qualifications
- 5+ years in penetration testing, red teaming, or security engineering
- Strong scripting/development skills (Python, PowerShell, etc.)
- Experience with offensive security tools and methodologies
Preferred Qualifications
- Experience with automation frameworks and pipeline integration
- Familiarity with attack graphs, CTEM, or exposure validation platforms
- Experience in cloud and hybrid environments
Skills
Not included in the source posting: about the role, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.