Product Engineers -Cloud (Multiple Levels) Hybrid

Key Responsibilities  

• Design, build, and operate cloud‑native security controls as software products across cloud infrastructure, data platforms, and application services 

• Engineer and maintain cloud security posture management (CSPM) and data loss prevention (DLP) capabilities to continuously detect, assess, and reduce risk in cloud environments 

• Build preventative, detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services 

• Integrate cloud security controls with SIEM and security tooling to generate high‑quality signals for detection, investigation, and incident response 

• Support incident handling and response by engineering detection logic, automation, and response mechanisms that improve containment and recovery 

• Apply modern cloud and software engineering practices (e.g., infrastructure as code, automated testing, CI/CD) to ensure security controls are reliable, scalable, and maintainable 

• Collaborate with platform engineers, application teams, and Digital Product Managers to align cloud security controls with architectures and developer workflows 

Essential Skills:  

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy 

• A minimum of 3+ years of professional software or security engineering experience, including ownership of production systems in cloud environments 

• Hands‑on experience engineering security controls within public cloud platforms (e.g., AWS and/or Azure), spanning infrastructure, platform services, or application‑level integrations 

• Background building or integrating cloud security posture management (CSPM), data protection, or data loss prevention (DLP) capabilities as engineered solutions

• Understanding of cloud‑native architectures and services (e.g., identity, networking, storage, compute) and how security controls integrate into them 

• Capability to engineer preventative, detective, and responsive security capabilities, including detection logic, automation, or response workflows 

• Practical application of modern engineering practices such as infrastructure as code, automated testing, CI/CD, and operational feedback loops 

• Ability to collaborate effectively with platform engineers, application teams, and security partners to deliver cloud security outcomes 

Desirable Skills 

• Working knowledge of cloud service provider security services and patterns (e.g., identity, networking, encryption, logging) and their use in real‑world cloud architectures 

• Practical exposure to advanced CSPM techniques, including policy‑as‑code, drift detection, and automated remediation 

• Experience with data classification, data handling, or data protection strategies that support DLP in cloud‑hosted systems 

• Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response 

• Hands‑on involvement in incident response or post‑incident analysis from an engineering perspective (e.g., improving detections, controls, or recovery mechanisms) 

• Exposure to infrastructure‑as‑code and cloud automation tooling used to deploy, configure, and secure cloud resources at scale 

• Understanding of secure design principles for cloud‑native and distributed systems, including identity‑centric and least‑privilege approaches 

• Demonstrated interest in continuously improving cloud security controls through learning, experimentation, and collaboration

• Proficiency in one or more modern programming languages (e.g., Python, Java, JavaScript), with the ability to write, review, and maintain production‑quality code 

Supervisory Responsibilities:  

• This role has supervisory responsibilities and serves as the first level manager for a team of engineers. 

Posting Closing date: Tuesday 7th July 2026 {11.59pm}