Role: Exposure Intelligence Analyst - Network & Perimeter (Firewalls / VPN / Segmentation)
Allstate Business Title / job profile: Lead Consultant - Threat & Incident Response
Team and overall work scope - The team operates within a newly established Exposure Management function in the broader cybersecurity organization, focused on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities shifting from traditional patch approaches to a more strategic focus on true business risk and exploitability
- IC roles are designed to bring in deep domain expertise (network, endpoint, cloud, identity, infrastructure, etc.) to bridge the gap between security insights and practical remediation strategies
- The Exposure Intelligence Analyst - Network & Perimeter serves as the SME responsible for identifying and prioritizing exposure risk across the enterprise network stack (firewalls, routing, VPNs, load balancers, SD-WAN, and segmentation).
- The role uses CTEM principles to convert findings into attack-path-aware exposure intelligence and enable faster remediation by operating as a peer SME with network engineering teams.
Success Measures- Fewer critical exposures due to misconfigurations or over-permissive access.
- Improved segmentation posture and measurable reduction in attack path feasibility.
- Faster remediation execution through SME-to-SME network partnerships.
Key Responsibilities (Core + Domain)
Exposure Intelligence (Core)- Normalize and analyze security signals and translate them into prioritized exposure narratives.
- Identify multi-step attack paths that traverse network controls, access paths, and trust boundaries.
- Produce actionable outputs for remediation teams; validate closure where feasible.
Network & Perimeter (Domain)- Own SME coverage for perimeter and internal network exposure: ACLs, segmentation, ingress/egress controls, remote access pathways.
- Identify systemic issues: over-permissive rules, weak segmentation, exposed services, misrouted traffic, insecure VPN configurations.
- Partner with network teams to drive durable fixes and prevent recurrence.
Required Qualifications- 3+ years in network security, network engineering, security operations, or exposure management.
- Strong understanding of network fundamentals (routing, firewalls, VPN, segmentation) and exposure patterns.
- Ability to translate network findings into business risk and remediation guidance.
Preferred Qualifications- Experience with traffic analysis, network telemetry, DNS/Proxy logs, firewall rule review, and segmentation strategy.
- Understanding of attacker tradecraft related to network movement and perimeter exploitation.
- Automation skills for analysis (Python, KQL, or equivalent).
SkillsAutomation, Endpoint Security, Identity Access Management (IAM), Identity Management (IdM), Scripting
CompensationCompensation offered for this role is 100,000.00 - 170,500.00 annually and is based on experience and qualifications.
The candidate(s) offered this position will be required to submit to a background investigation.
Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.
When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.
