Sr Staff Security Operations Engineer (REMOTE)

GEICO is seeking an experienced Sr. Staff Engineer, Operations Engineer with a passion for managing complex programs across multiple departments and team to build Product Security operational excellence from the ground up. You will help drive our business transformation as we transition from a traditional IT model to a tech organization with engineering excellence as its mission.

The Sr. Staff Engineer, Operations is a key member of the Product Security leadership team working across the organization to ensure successful delivery of effective security controls and prioritization of initiatives and issue management. In this role you will own a portfolio of initiatives such as compliance, engineering and operational excellence and vendor engagement. This is beyond technical project management and requires a background in building teams, delivering solutions and proving success with KPIs and visible metrics. The ideal candidate will have excellent communication skills, real world examples in engaging the right technical partners and leadership to drive towards solutions and get people working together.

​​​As a Sr Staff Engineer, you will lead efforts to identify, plan, and deliver program security outcomes by independently engaging a broad set of internal and external stakeholders. This also includes the following:

• Monitor and track signals of security gaps, initiative delays, compliance risks due to system issues, and drive resolution.

• Create visuals on current performance and risk indicators related to product security initiatives and operations.

• Help to develop standards on reporting product security tool effectiveness, maturity, resilience and other factors in determining risks as they come up.

• Help drive automation of routine tasks to drive growth in security protection and detection technologies.

• Provide expert guidance, demonstrations and lead discussions on security best practices to stakeholders and leadership.

• Works in lockstep with our CSIRT, GRC, Platform Security, Development/Product organizations and Technology partner teams to ensure protection coverages, proper detection event notifications, documentation and standards we can all use.

• Organize, store and manage operational best practices documentation for security solutions to protect our business products including applications, services, code and associated repositories, infrastructure as code (IaC), and code related to deployment pipelines.

• Partner with the project sponsors, delivery teams, and stakeholders to deliver quality solutions on time and within budget by coordinating project activities across multiple systems, departments, and teams.

• Create, maintain, and actively manage a detailed project schedule, change control process, and documentation.

• Identify and raise appropriate security risks, in addition to presenting detailed and implementable solutions or alternatives, and drive those campaigns to resolution.

Qualifications:

• Demonstrated understanding of application security tooling and testing including, SAST, DAST, SCA, etc. as well as cross-functional awareness of security operations including SOC, Incident Response, Privacy, Legal, Vulnerability Management, and Data Protection. 

• Familiar with OWASP projects and implementation within the product security organization such as, Web Top Ten, API Top Ten, Mobile Top Ten and ASVS. 

• Knowledge of data access languages such as SQL and GraphQL and the ability to construct queries against data sources.

• Extensive experience in engineering and solution delivery in a dynamic service provider environment.

• Strong knowledge of project management methodologies and best practices.

• Proven track record of successfully managing large/complex projects across cross-functional teams, building processes and coordinating delivery 

• Working knowledge of security services and their impact on production systems including runtime protection services, detective and protective agents and/or daemon sets, vulnerability and application scanning, etc..

• Experience in a multi-cloud environment including AWS, Azure, and/or Google Cloud.

• Experience communicating and presenting to senior and junior staff with the ability to influence development partners and stakeholders.

• Detail and deadline oriented with effective organizational and analytic skills

• Strong critical thinking, problem solving, decision making, and analytical skills

• Outstanding time management skills and attention to detail

• Excellent verbal/written communication skills, including the ability to clearly document findings, proposals, issues, and status

• Experience with continuous delivery

• Self-motivated and able to work independently while coordinating activities with cross-divisional teams

• Effective leadership qualities, ability to influence without direct management authority

• ​Ability to excel in a fast-paced, startup-like environment.

• Knowledge of industry-standard security control frameworks including NIST, PCI, SOX, NYDFS.

Preferred Qualifications:

• Knowledge in a hybrid cloud environment such including Containerization, VMs, CI/CD pipeline, IaC

• Experience defining KPI’s/SLA’s used to drive multi-million-dollar businesses and reporting to senior leadership.

Experience:

• 8+ years in engineering focused role, preferably in the tech industry

• 4+ years of experience with AWS, GCP, Azure, or other cloud providers

• 4+ years in a senior role influencing company direction

• Experience applying engineering to meet or exceed third party attestation requirements (PCI, SOX, …).

Education:

• Bachelor’s degree in Computer Science, Cyber Security, or equivalent education with work experience

• Third party certifications on engineering related technologies.

Annual Salary

The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.

Benefits:

As an Associate, you’ll enjoy our Total Rewards Program* to help secure your financial future and preserve your health and well-being, including:

• Premier Medical, Dental and Vision Insurance with no waiting period**
• Paid Vacation, Sick and Parental Leave
• 401(k) Plan
• Tuition Assistance
• Paid Training and Licensures

*Benefits may be different by location.  Benefit eligibility requirements vary and may include length of service.

**Coverage begins on the date of hire. Must enroll in New Hire Benefits within 30 days of the date of hire for coverage to take effect.

The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.

GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.