Exposure Intelligence Analyst – Applications & APIs, OWASP, SAST-DAST, Auth

This is a fully remote position, open to applicants in United States.

📋 Description

• Transform application insights into exposure intelligence and prioritize based on exploitability.

• Detect attack vectors that involve authentication vulnerabilities, insecure APIs, weak session management, and privilege boundaries.

• Provide clear remediation recommendations and collaborate with application owners to ensure issues are resolved.

• Maintain subject matter expert (SME) coverage for web, application, and API exposure, including OWASP-class risks and patterns of API misuse.

• Recognize systemic issues such as broken authentication, insecure direct object references, injection vulnerabilities, weak access controls, and improper handling of secrets.

• Collaborate with development teams and AppSec stakeholders to enhance secure practices and minimize the creation of recurring vulnerabilities.

• Link findings to actual attack paths utilizing CTEM principles.

• Lead remediation efforts that significantly decrease exploitable exposure.

⛳️ Requirements

• A minimum of 3 years of experience in application security, AppSec engineering, security operations, or exposure management.

• Knowledge of web security basics and prevalent API/application attack vectors.

• Capability to convert technical findings into business risk assessments and actionable engineering solutions.

• Preferably experienced with SAST/DAST tools, vulnerability management, and secure software development lifecycle concepts.

• Familiarity with contemporary authentication methods such as OAuth/OIDC, API gateways, and microservices is preferred.

• Strong teamwork abilities with engineering teams and a proven track record of driving measurable improvements is preferred.

• Candidates selected for this role must undergo a background check.

• Allstate typically does not sponsor employment-based visas for this position.

• Remote employees are required to have a dedicated, private workspace that is free from distractions.

• A reliable internet connection is necessary, with minimum download speeds of 50 MB and upload speeds of 5 MB.

🏝️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.

• Monthly reimbursement for connectivity to help cover internet expenses.

• Opportunity to challenge existing norms and influence the future of security measures.

• An environment that encourages innovative thinking.

• Meaningful work that supports customers and communities.