SOC Analyst - Senior Consultant

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

The Allstate Cybersecurity & Controls (ACC) Threat Detection and Response team is responsible for detecting, investigating, responding to, and remediating cybersecurity incidents across on-premises, cloud, and affiliated environments. The Incident Management Senior Consultant II plays a key role in leading incident investigations, coordinating response activities, and minimizing cyber risk through effective threat detection and incident management.

Monitor, analyse, and investigate security alerts generated from SIEM, EDR/XDR, Email Security, Cloud Security, and other security platforms. Lead and coordinate cybersecurity incident response activities for medium to high severity incidents. Collaborate with internal stakeholders, technical teams, and external partners to drive incident resolution and remediation efforts Document investigation findings, timelines, lessons learned, and response activities in accordance with established processes and procedures. Communicate incident status, risks, and recommendations to leadership and relevant stakeholders. Participate in threat hunting, proactive detection improvement initiatives, and continuous enhancement of incident response capabilities. Support after-hours incident response activities and rotational on-call responsibilities as required in weekends. Primary Skills & Criteria Experience serving as an Incident Commander or lead investigator during cybersecurity incidents. Strong understanding of incident response methodologies, security operations processes, and cyber kill chain concepts. Experience with EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, or similar technologies. Strong knowledge of network technologies including TCP/IP, DNS, HTTP/S, VPN, Firewalls, IDS/IPS, and network traffic analysis. Hands-on experience analysing logs and security events from Azure, AWS, Microsoft 365, or other cloud platforms. Knowledge of leveraging AI-assisted security operations, including threat detection, investigation acceleration, alert triage, automation, and operational efficiency improvements within a Security Operations Center (SOC). Basic understanding of AI/Generative AI security risks, including prompt injection, data leakage, unauthorized model access, and misuse of AI applications within enterprise environments. Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders. Experience & Certifications Minimum 8 years of overall IT/Cybersecurity experience with at least 5-6 years in Security Operations, Incident Response, or Threat Detection roles. Preferred certifications include GCIH, GSEC, GISF, CEH, CompTIA Security+, SC-200, or equivalent cybersecurity certifications. Primary Skills Customer Centricity, Digital Literacy, Inclusive Leadership, Learning Agility, Results-Oriented Shift Time Recruiter Info Yateesh B G ybgaa@allstate.com About Allstate Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact. The Allstate Corporation is one of the largest publicly held insurance providers in the United States. Ranked No. 84 in the 2023 Fortune 500 list of the largest United States corporations by total revenue,