Product Security Engineers (multiple Levels) Hybrid

Allstate Allstate · Insurance · Belfast, United Kingdom +1

Allstate is seeking Product Security Engineers to design, build, and operate enterprise security controls as software products. This role involves owning the full software development lifecycle, writing production code, and ensuring the reliability and effectiveness of security capabilities integrated into the enterprise technology ecosystem. The position emphasizes modern software engineering practices and collaboration with product and platform teams.

What you'd actually do

  1. Design, build, and operate enterprise security controls as software products that integrate directly into the SDLC and core enterprise platforms
  2. Own security control capabilities end‑to‑end, including architecture, implementation, deployment, and ongoing operational support in production
  3. Write, test, and maintain high‑quality production code while meeting delivery and reliability expectations as a software engineer
  4. Apply engineering best practices such as test‑driven development, paired programming, and continuous integration and deployment
  5. Contribute to high‑level and low‑level system and component designs with a focus on scalability, reliability, and security outcomes

Skills

Required

  • Java
  • JavaScript
  • designing, building, and operating scalable distributed systems
  • cloud-based applications
  • microservices architectures
  • design, develop, and integrate APIs and backend services
  • REST-based interfaces
  • test driven development
  • paired programming
  • continuous integration and deployment
  • agile delivery models

Nice to have

  • application and API security concepts
  • OWASP Top 10
  • MITRE ATT&CK
  • authentication
  • authorization
  • identity based access controls
  • secure software development practices
  • behavior driven development
  • security focused testing patterns
  • containerized and cloud native environments
  • Docker
  • Kubernetes
  • AWS
  • Azure
  • large language models (LLMs)
  • machine learning concepts
  • AI driven capabilities
  • AI assisted development tools
  • Copilot
  • Cursor
  • robust security guarantees
  • excellent developer experience

What the JD emphasized

  • legal right to work in the UK
  • Minimum of 3 years of software engineering experience
  • demonstrated ownership of production systems throughout the full software development lifecycle
  • proficiency in one or more modern programming languages (e.g., Java, JavaScript)
  • Hands on experience designing, building, and operating scalable distributed systems and cloud‑based applications, including microservices architectures
  • Demonstrated ability to design, develop, and integrate APIs and backend services, including REST‑based interfaces
  • Familiarity with modern development workflows and engineering practices such as test driven development, paired programming, and continuous integration and deployment
  • Experience collaborating effectively within agile delivery models, working closely with product managers, engineers, and partner teams to deliver outcomes