Product Engineers -Cloud (Multiple Levels) Hybrid

Key Responsibilities

• Design, build, and operate cloud‑native security controls as software products across cloud infrastructure, data platforms, and application services

• Engineer and maintain cloud security posture management (CSPM) and data loss prevention (DLP) capabilities to continuously detect, assess, and reduce risk in cloud environments

• Build preventative, detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services

• Integrate cloud security controls with SIEM and security tooling to generate high‑quality signals for detection, investigation, and incident response

• Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery

• Apply modern cloud and software engineering practices (e.g., infrastructure as code, automated testing, CI/CD) to ensure security controls are reliable, scalable, and maintainable

• Collaborate with platform engineers, application teams, and Digital Product Managers to align cloud security controls with architectures and developer workflows

Essential Skills:

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy

• A minimum of 3+ years of professional software or security engineering experience, including ownership of production systems in cloud environments

• Hands‑on experience engineering security controls within public cloud platforms (e.g., AWS and/or Azure), spanning infrastructure, platform services, or application‑level integrations

• Background building or integrating cloud security posture management (CSPM), data protection, or data loss prevention (DLP) capabilities as engineered solutions

• Understanding of cloud‑native architectures and services (e.g., identity, networking, storage, compute) and how security controls integrate into them

• Capability to engineer preventative, detective, and responsive security capabilities, including detection logic, automation, or response workflows

• Practical application of modern engineering practices such as infrastructure as code, automated testing, CI/CD, and operational feedback loops

• Ability to collaborate effectively with platform engineers, application teams, and security partners to deliver cloud security outcomes

Desirable Skills

• Working knowledge of cloud service provider security services and patterns (e.g., identity, networking, encryption, logging) and their use in real‑world cloud architectures

• Practical exposure to advanced CSPM techniques, including policy‑as‑code, drift detection, and automated remediation

• Experience with data classification, data handling, or data protection strategies that support DLP in cloud‑hosted systems

• Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response

• Hands‑on involvement in incident response or post‑incident analysis from an engineering perspective (e.g., improving detections, controls, or recovery mechanisms)

• Exposure to infrastructure‑as‑code and cloud automation tooling used to deploy, configure, and secure cloud resources at scale

• Understanding of secure design principles for cloud‑native and distributed systems, including identity‑centric and least‑privilege approaches

• Demonstrated interest in continuously improving cloud security controls through learning, experimentation, and collaboration

• Proficiency in one or more modern programming languages (e.g., Python, Java, JavaScript), with the ability to write, review, and maintain production‑quality code

Supervisory Responsibilities:

• This role has supervisory responsibilities and serves as the first level manager for a team of engineers.

Posting Closing date: Monday 8th June 2026{11.59pm}