Platform Consultant Product Security

Date PostedJune 10, 2026LocationNot specifiedCompanyAllstateSalary$160,000 - 230,000 annuallyTypeSenior Level

Job Summary

The Platform Consultant acts as a strategic advisor to engineering teams, focusing on enterprise-wide security solutions. The role involves embedding secure-by-design principles, threat modeling, and defining platform strategies to ensure secure, scalable development. You will collaborate cross-functionally to drive adoption of modern engineering practices like Zero Trust and AI-integrated security.

Responsibilities

  • Consult on secure platform design and implementation
  • Embed security-by-design and threat modeling into lifecycle
  • Define security posture for leadership
  • Mentor engineers in systems thinking and best practices
  • Drive adoption of Zero Trust and scalable architecture

Required Skills

  • 8+ years software engineering or architecture experience
  • Expertise in Agile/DevOps and CI/CD
  • Cloud-native architecture (Docker, Kubernetes, AWS/Azure)
  • Strong proficiency in Java and JavaScript
  • Knowledge of security frameworks (OWASP, MITRE, IAM)

Job Details

### Job Description Product Security is growing. We are engineering enterprise-wide security solutions that start left instead of just shifting left. Our focus spans AI Security, SaaS Security, API Security, Threat Modeling Agents, Apex Threat Modeling, Code Security in the IDE/Pipelines, and more. We are seeking a visionary Platform Consultant with deep engineering expertise and strong security architecture experience. In this senior-level role, you will act as a strategic advisor to our engineering teams and organizations, guiding them through complex technical challenges and shaping platform strategies. You will embed secure-by-design principles, including rigorous threat modeling from the outset of development, to fortify our platforms from the ground up. ### Key Responsibilities - Serve as a trusted consultant to engineering teams and organizations, guiding secure platform design and implementation across diverse product domains. - Communicate clearly and effectively ensuring business and engineering needs are met. - Foster effective collaborative sessions with teams from different disciplines and leadership levels. - Embed secure-by-design principles and deep threat modeling practices into the development lifecycle, ensuring security is foundational-not bolted on. - Define and communicate security posture clearly to technical and business leadership, enabling informed decision-making. - Lead the ideation and implementation of innovative security controls that challenge the status quo and elevate embedded security maturity. - Drive forward engineering practices that adapt to evolving technologies, enabling scalable, resilient, and efficient platforms. - Mentor engineers and platform consultants in systems thinking, reusable design, and outcome-based delivery. - Influence cross-functional teams through Discovery & Framing sessions, architectural reviews, and strategic planning. - Promote and enforce architectural standards, simplification, and reuse across the enterprise. - Actively participate in agile ceremonies and foster a culture of continuous learning and iterative delivery. ### Job Qualifications **Essential Skills:** - Extensive experience (8+ years) in software engineering, platform development, or architecture roles with increasing technical leadership responsibilities. - Demonstrated success as a high-impact technical advisor to multiple engineering teams. - Expert-level knowledge of Agile/XP and DevOps methodologies, including paired programming, TDD, and CI/CD automation. - Hands-on expertise in architecting large-scale distributed systems, such as cloud-native microservices on Docker/Kubernetes (AWS, Azure, or equivalent). - Broad technical proficiency across multiple programming languages (especially Java and JavaScript) and design of robust RESTful APIs. **Desirable Skills:** - In-depth knowledge of industry security frameworks (OWASP Top 10, MITRE ATT&CK, OAuth 2.0, OpenID Connect, SAML). - Expertise in security architecture including advanced threat modeling, IAM strategies, and Zero Trust architectures. - Proficiency in procedural (Go, Rust) and functional (F#, Elixir, Haskell, Clojure) programming languages. - Technical proficiency with AI tools (running local models, developing MCP servers, AI-powered development tools). - Expertise in API-first design (OpenAPI, Swagger) and modern cryptographic principles (AES, TLS, Argon2).