> Markdown version of [/jobs/ext/3782103-applications-and-apis-security-lead-consultant](https://www.wearedevelopers.com/jobs/ext/3782103-applications-and-apis-security-lead-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Applications and APIs Security Lead Consultant

- **Company:** Allstate Corporation
- **Location:** Springfield, IL, United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $170,500.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), User Authentication, Open Web Application Security, Web Application Security, Software Engineering, Software Vulnerability Management, Software Security
- **Published:** October 16, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3022782134-2

## About the Role

* Application Programming Interface (API) Security
 * Application Security
 * Application Vulnerability Management
 * Authentication
 * Web Application Security
 * Web Security
 * SASTDASTOAuth/OIDCSecure Software Development Lifecycle

## Description

Lead application and API exposure intelligence across web applications, authentication flows, and security testing signals. Prioritize vulnerabilities by exploitability and business risk, identify attack paths, and partner with engineering teams to guide remediation and reduce recurring security exposures., * Translate application security findings into exposure intelligence and prioritize them based on exploitability and business risk.

 * Identify attack paths involving authentication flaws, insecure APIs, weak session handling, and privilege boundaries.
 * Provide remediation guidance and work with application owners to validate closure.
 * Serve as the subject matter expert for web, application, and API exposures, including OWASP risks and API misuse.
 * Identify systemic security patterns such as broken authentication, insecure direct object references, injection paths, weak access controls, and insecure secrets handling.
 * Partner with development teams and App
 * Sec stakeholders to improve secure patterns and reduce recurring exposures.