GEICO · 1 day ago
Staff Software Engineer, Vulnerability Management (HYBRID)
GEICO is seeking a Staff Software Engineer specializing in Vulnerability Management to lead enterprise initiatives and collaborate with cross-functional teams. The role involves designing and implementing secure and scalable solutions to enhance the company's cybersecurity posture and drive vulnerability management initiatives.
Auto InsuranceFinancial ServicesGovernmentInsuranceInternetMobile
Responsibilities
Lead software design, development, and delivery of integrated systems to drive Vulnerability Management initiatives
Deliver automation initiatives, conduct advanced research, and develop proofs of concept to enhance our capabilities and improve overall efficiency
Achieve business outcomes through force multiplication
Develop, integrate, and maintain multilevel cybersecurity designs, architectures, policies, and procedures
Provide secure design guidance and recommendations to developers, infrastructure, and product engineers
Influence and educate partner teams to bring an engineering first approach to develop sustainable security systems
Mentor peers and team members in security technologies, enterprise solution design, deployment, and effective customer interaction
Provide motivating demonstrations and communications to show the value of our security measures to the business, highlighting the low impact on systems, improved operability and resiliency
Qualification
Required
Tech-lead with data engineering and software development experience in a hybrid environment (AWS, Azure, on-prem)
Proficiency in at least one modern programming language (Python, Java, Scala, Go) and deep experience building scalable production-grade data services, APIs, or ingestion frameworks
Expertise in designing, building, and operating large‑scale, resilient, and high‑performance data pipelines across distributed systems, with strong knowledge of ETL/ELT patterns, data orchestration, and data quality frameworks
Advanced proficiency in modern data storage and processing technologies, including SQL/NoSQL databases (e.g., PostgreSQL), query optimization, and data modeling for analytical and operational use cases
Hands‑on experience with reporting and analytics tools such as Power BI, Tableau, or equivalent, including developing semantic models, optimizing reporting datasets, and enabling business teams with curated data
Strong applied skills in distributed compute ecosystems (e.g., Spark or similar), and the ability to optimize workloads for performance, cost efficiency, and reliability
Extensive knowledge and experience of building data intensive large-scale distributed systems on cloud
Experience building the architecture and design of new and current systems (architecture, design patterns, reliability, and scaling)
Fluency in DevOps concepts and best practices in CI/CD pipelines and infrastructure as a code
Experience with application performance monitoring tools and performance assessments
Ability to design, implement, deploy, and operate systems to solve complex security problems in a fast-paced, startup-like environment
Development and leadership in Cybersecurity domain, preferably in Vulnerability Management Engineering
Strong knowledge of industry-standard security tools, frameworks, and best practices including MITRE, CIS and NIST
Experience working with auditors and demonstrating security controls
8+ years of non-internship professional software and data engineering experience of building large-scale distributed systems
4+ years of experience with architecture and design in a tech lead role
4+ years of experience with building and operating high‑performance data pipelines across distributed systems, with strong knowledge of ETL/ELT patterns, asynchronous data ingestion, data orchestration, and data quality frameworks using SQL/NoSQL databases (e.g., PostgreSQL), Power BI, Tableau, or equivalent
3+ years of experience in open-source frameworks
Foundational knowledge of security best practices for system design and development
Experience of building applications for security domain
Experience of assessing security vulnerabilities and driving their remediation is a plus
Bachelor's degree in Computer Science, Information Systems, Cyber Security, or equivalent education with work experience
Preferred
Professional security certification (e.g., CISSP, CCSP, CSSLP) is a plus
Benefits
Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.
Company
GEICO
GEICO, Government Employees Insurance Company, has been providing affordable auto insurance since 1936. It is a sub-organization of Berkshire Hathaway.
Funding
Current Stage
Late StageTotal Funding
unknown1996-01-01Acquired
Leadership Team
Recent News
Business Wire
2026-01-07
2025-12-15
Company data provided by crunchbase