> Markdown version of [/jobs/ext/2962698-cloud-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/2962698-cloud-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Product Security Engineer

- **Company:** Allstate Corporation
- **Location:** Springfield, IL, United States
- **Salary:** $155,000.0 - $185,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Continuous Integration, Identity and Access Management, Key Management, Network Segmentation, Security Information and Event Management, Software Vulnerability Management, Google Cloud, Spring Cloud, Software Security, Terraform, Data Pipelines, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** September 17, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2975765670-2

## About the Role

* Cloud security architecture
 * AWS/Azure/GCP security services
 * Identity and Access Management (IAM)
 * Threat modeling
 * Application and API security
 * Infrastructure as Code (Terraform/Cloud
 * Formation)
 * CI/CD pipeline security
 * Container and Kubernetes security
 * Vulnerability management and remediation
 * Security incident response

## Description

Allstate is seeking a Cloud Product Security Engineer to secure cloud-native insurance and financial products in a dynamic, customer-focused environment. You'll partner with product, engineering, and DevOps teams to design secure architectures, conduct threat modeling, and embed security controls across AWS/Azure/GCP. Responsibilities include automating security via CI/CD and IaC, managing vulnerabilities and misconfigurations, and leading incident response. You'll shape security standards, mentor teams, and help advance Allstate's mission of protecting customers and communities through resilient digital solutions., * Design and implement secure architectures for Allstate's cloud-hosted insurance and financial products across AWS/Azure/GCP environments.

 * Embed security into the product lifecycle by partnering with engineering, product, and Dev
 * Ops teams from design through deployment.
 * Conduct threat modeling, risk assessments, and security reviews for cloud-native applications, APIs, and data pipelines.
 * Implement and manage security controls including IAM, encryption, key management, secrets management, and network segmentation.
 * Automate security testing and policy enforcement using CI/CD pipelines, infrastructure as code, and security-as-code practices.
 * Monitor cloud environments for vulnerabilities and misconfigurations, and drive timely remediation with engineering teams.
 * Evaluate and integrate cloud security tools such as CSPM, CWPP, SIEM, and SAST/DAST solutions.
 * Develop and maintain secure coding standards, reference architectures, and best practices for cloud product teams.
 * Lead incident response for cloud product security events, including investigation, containment, and lessons learned.
 * Mentor engineers on cloud security principles and contribute to a culture of security, learning, and continuous improvement.


## Related Videos

- [Serverless Architectures with Spring Cloud Functions and Knative](https://www.wearedevelopers.com/videos/814-serverless-architectures-with-spring-cloud-functions-and-knative)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)

## Related Articles

- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)