Staff Software Engineer, Vulnerability Management

About the role

GEICO is seeking an experienced full-stack engineer with a deep technical expertise and passion for building high-performance, low maintenance, zero-downtime, and highly scalable systems. The ideal candidate has a proven track record of design, development, and implementation of scalable solutions in hybrid environments using commercial and open-source products, preferably in Cybersecurity domain.

Responsibilities

• Provide technical leadership for cybersecurity program strategy, software development, integration decisions, analyzing design constraints and trade-offs in system and security design
• Lead design, development, and delivery of security solutions to drive Vulnerability Management initiatives
• Deliver automation initiatives, conduct advanced research, and develop proofs of concept to enhance our security capabilities and improve overall efficiency
• Achieve security business outcomes through force multiplication
• Develop, integrate, and maintain multilevel cybersecurity designs, architectures, policies, and procedures
• Provide secure design guidance and recommendations to developers, infrastructure, and product engineers
• Influence and educate partner teams to bring an engineering first approach to develop sustainable security systems
• Mentor peers and team members in security technologies, enterprise solution design, deployment, and effective customer interaction
• Provide motivating demonstrations and communications to show the value of our security measures to the business, highlighting the low impact on systems, improved operability and resiliency

Requirements

• Technical lead with full-stack software development and DevSecOps experience in a hybrid environment (AWS, Azure, on-prem)
• Development and leadership in Cybersecurity domain, preferably in Vulnerability Management Engineering
• Specialization with at least one modern language such as Java, Go, Python or C#, and a scripting language
• Extensive knowledge and experience of building data intensive large-scale distributed systems on cloud
• Experience building the architecture and design of new and current systems (architecture, design patterns, reliability, and scaling)
• Fluency in DevOps concepts and best practices in CI/CD pipelines and infrastructure as a code
• Experience with application performance monitoring tools and performance assessments
• Ability to design, implement, deploy, and operate systems to solve complex security problems in a fast-paced, startup-like environment
• Strong knowledge of industry-standard security tools, frameworks, and best practices including MITRE, CIS and NIST
• Experience working with auditors and demonstrating security controls

Qualifications

• Experience 8+ years of non-internship professional software engineering experience of building large-scale distributed systems
• Experience with architecture and design in a tech lead role
• Experience with AWS, GCP, Azure, or other cloud providers
• Experience with open-source frameworks
• Foundational knowledge of security best practices for system design and development
• Experience of building applications for security domain
• Experience of assessing security vulnerabilities and driving their remediation is a plus
• Professional security certification (e.g., CISSP, CCSP, CSSLP) is a plus

Skills

• Full-stack software development and DevSecOps experience
• Experience in Cybersecurity domain, preferably in Vulnerability Management Engineering
• Specialization with at least one modern language such as Java, Go, Python or C#
• Experience with data-intensive large-scale distributed systems on cloud
• Experience with architecture and design of new and current systems
• Fluency in DevOps concepts and best practices
• Experience with application performance monitoring tools and performance assessments
• Experience with industry-standard security tools, frameworks, and best practices
• Experience working with auditors and demonstrating security controls
• Professional security certifications (e.g., CISSP, CCSP, CSSLP)

Benefits

The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers. GEICO offers a comprehensive Total Rewards program that includes market-competitive compensation, a 401K savings plan vested from day one that offers a 6% match, performance and recognition-based incentives, and tuition assistance. Additional benefits include mental healthcare, fertility and adoption assistance, and flexible work arrangements.

Pay

$100,000.00 - $260,000.00 Annual Salary

Schedule

Full-time