Jobs / United States / Allstate Insurance Company
Attack Surface Management Service Lead Consultant - Exposure Intelligence Team
Allstate Insurance Company · 🇺🇸 US - Remote · Remote
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 38 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 25 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Allstate Insurance Company paid sponsored hires in similar roles5 certified filings for “Software Engineer Lead Consultant” (Software Developers) in TX: $139k–$166k, median $166k. Most were filed at wage level IV (100%) — 4 lottery entries, ≈61% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Allstate Insurance Company
The US Department of Labor certified 38 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 25 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Allstate Insurance Company →
About the role
At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. Job Description Role Scope: Attack Surface Management Service Lead Consultant – Exposure Intelligence Allstate Job Profile & Family: Lead Consultant- Threat & Incident Response Team and overall work scope • The team operates within a n ewly established Exposure Management function in the broader cybersecurity organization , focused on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities shifting from traditional patch approaches to a more strategic focus on true business risk and exploitability • Individual Contributor/ Lead Consultant roles are designed to bring in deep respective domain expertise (network, endpoint, cloud, identity, infrastructure, Databases & Data Stores, Applications, API's, Attack Surface Management etc.) to bridge the gap between security insights and practical remediation strategies • The Lead Consultant – Attack Surface Management is the SME responsible for discovering, monitoring, and governing the enterprise's internet-facing attack surface, including unknown and unmanaged assets, external exposures, and third-party and subsidiary footprints . As the founding member of the capability, the role establishes ASM practices, applies CTEM principles to tie external findings to real attack paths, and partners with asset owners to drive remediation that measurably reduces exploitable exposure. Success Measures • Expanded and validated coverage of the external attack surface, with fewer unknown or unowned internet-facing assets. • Reduced time from discovery of a new external exposure to an assigned owner and completed mitigation. • Higher signal quality in external findings, with fewer false positives and more accurate prioritization. Key Responsibilities (Core + Domain) Exposure Intelligence (Core) • Translate external attack surface findings into exposure intelligence and exploitability-based prioritization. • Identify attack paths that start from internet-facing assets, such as exposed services, misconfigurations, expired or weak certificates, and exposed admin interfaces. • Produce clear remediation guidance and partner with asset owners to validate closure. Attack Surface Management (Domain) • Own SME coverage for external attack surface discovery and monitoring using EASM and scanning platforms (e.g., Censys, Qualys). • Establish asset governance practices, including attribution, ownership assignment, inventory reconciliation, and detection of shadow IT and orphaned assets. • Extend visibility to third-party, subsidiary, and cloud-hosted footprints, and partner with Penetration Testing, Product Security, and Exposure Response to operationalize findings. Required Qualifications • 3+ years in attack surface management, vulnerability management, security operations, or exposure management. • Strong understanding of internet-facing infrastructure, including DNS, IP space, certificates, cloud hosting, and common external misconfigurations. • Ability to translate technical findings into business risk and practical remediation actions. Preferred Qualifications • Hands-on experience with Censys or comparable EASM platforms, and with Qualys or similar vulnerability scanning tools. • Familiarity with asset inventory/CMDB processes, cloud provider connectors, and third-party risk practices. • Ability to build a new capability fro