Managing Engineer - Security (Hybrid)

At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Your role in the team
Product Security Engineering designs, builds, and operates enterprise security controls as software products that integrate directly into the SDLC and core enterprise platforms. The organization applies modern engineering practices to create scalable, reliable, and developer-friendly security capabilities that are embedded into the enterprise technology ecosystem and enable secure-by-default behaviors while minimizing friction for product and platform teams.

The Managing Security Engineer is a hands-on engineering leader responsible for leading a team that delivers and operates these security controls in production. This role blends deep technical leadership, people leadership, and delivery ownership: setting technical direction, guiding architecture and design decisions, coaching and developing engineers, and ensuring the team consistently ships high-quality software that achieves measurable security and engineering outcomes. The Managing Security Engineer is accountable for the end-to-end success of the team's security products, including reliability, adoption, and operational health in production.

Key Responsibilities

• Lead and manage an engineering team delivering security controls as software products, including hiring, onboarding, coaching, performance management, and career development

• Set technical direction for the team and drive high-quality execution across design, implementation, deployment, and production support of security controls

• Serve as a hands-on technical leader by contributing to architecture and design reviews, guiding technical decisions, performing code reviews, and supporting critical-path implementation as needed

• Own operational outcomes for the team's products in production, including reliability, performance, and continuous improvement through feedback and learning loops

• Partner with Digital Product Managers, platform teams, and engineering stakeholders to effect alignment across roadmaps, priorities, and delivery plans spanning multiple product portfolios

• Build and sustain a strong engineering culture that emphasizes modern delivery practices (e.g., test-driven development, paired programming, CI/CD), fast feedback, and continuous improvement

• Influence and innovate solutions to complex security challenges by translating security needs into scalable engineering approaches and reusable capabilities

• Facilitate effective agile execution (standups, planning, backlog refinement, retrospectives) while maintaining a strong focus on outcomes rather than ceremony

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy

• Minimum of 5 years of professional software engineering experience, including hands on production coding in modern languages (e.g., Java, JavaScript, Python) and ownership of production systems delivering measurable reliability, performance, or security outcomes

• A minimum of 2 years' experience leading engineers through hands on technical guidance, including architecture reviews, design decisions, and code reviews

• Proven background in building and operating scalable, distributed systems in cloud environments, including microservices-based architectures

• Track record of designing, evolving, and integrating APIs and backend services, with attention to reliability, scalability, and security considerations

• Practical application of modern engineering practices such as test-driven development, paired programming, CI/CD pipelines, and operational feedback loops including monitoring and observability

• Experience operating within agile delivery environments, partnering closely with Digital Product Managers and engineering stakeholders to deliver outcomes

• Demonstrated depth in security engineering domains such as application security, cloud security, DevSecOps, or secure software development practices

• Practical experience designing or operating security controls embedded into CI/CD pipelines, developer workflows, or shared platform services

• Proven ability to influence technical decisions beyond the immediate team, driving adoption of secure patterns, standards, or reusable capabilities across product areas

• Experience mentoring senior engineers and emerging technical leaders, with a focus on raising engineering quality and long-term team capability

• Strong organizational awareness and the ability to navigate cross-team dependencies while maintaining delivery momentum and technical integrity

• Exposure to cloud-native and containerized environments (e.g., Kubernetes, Docker, AWS and/or Azure) and the security considerations that accompany them

• Familiarity with security metrics and operational signals (e.g., control adoption, reliability, incident reduction) used to evaluate engineering and security outcomes

• Strong mindset of balancing delivery velocity, security rigor, and developer experience, making thoughtful tradeoffs appropriate to context

• Demonstrated commitment to building solutions that balance robust security guarantees with an excellent developer experience, without compromising one for the other

• This role has supervisory responsibilities and serves as the first level manager for a team of engineers.