Autonomous Penetration testing Lead Consultant
About the Role
At Allstate, the Autonomous Penetration Testing Lead Consultant operates within a newly established Exposure Management function in the broader cybersecurity organization. This role focuses on modernizing how the enterprise identifies, prioritizes, and mitigates security vulnerabilities by shifting from traditional patch approaches to a strategic focus on true business risk and exploitability. The position bridges the gap between security insights and practical remediation strategies, transforming traditional penetration testing into scalable, CTEM-aligned validation.
Success Measures
- Increased automation coverage of penetration testing activities
- Reduction in manual testing effort
- Faster validation of exploitability and remediation effectiveness
Responsibilities
- Design and build autonomous penetration testing pipelines and tooling
- Integrate adversarial testing into CI/CD and enterprise workflows
- Automate attack path validation and exploit verification
- Partner with Exposure Intelligence and Response teams to validate risk
- Continuously improve testing coverage and scalability
Requirements
- 5+ years in penetration testing, red teaming, or security engineering
- Strong scripting/development skills (Python, PowerShell, etc.)
- Experience with offensive security tools and methodologies
Preferred Qualifications
- Experience with automation frameworks and pipeline integration
- Familiarity with attack graphs, CTEM, or exposure validation platforms
- Experience in cloud and hybrid environments
Skills
- Application Programming Interface (API)
- Authentication
- Penetration Testing
- Red Teaming
- Scripting
- Secure Software Development Lifecycle
- Security Tools
Pay
Compensation offered for this role is $100,000.00 - $170,500.00 annually, based on experience and qualifications.
Benefits
- Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse
- Monthly connectivity reimbursement to help offset internet costs for eligible remote employees
When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.
The candidate(s) offered this position will be required to submit to a background investigation. Allstate generally does not sponsor individuals for employment-based visas for this position.