Sr. Security Engineer – Vulnerability Management; HYBRID

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose.

When you join our company, we want you to feel valued, supported and proud to work here. That’s why we offer The GEICO Pledge:
Great Company, Great Culture, Great Rewards and Great Careers.

GEICO is seeking a highly experienced Senior Staff Security Engineer to lead the strategy, architecture, and technical execution of Vulnerability Management across a complex, hybrid technology ecosystem. This role blends deep security engineering expertise with strong architectural leadership and the ability to influence engineering practices  will drive the organization’s vulnerability lifecycle maturity, champion security‑by‑design, and elevate the skills and effectiveness of engineers across multiple teams.

This is a high‑impact technical role who maintains a strong connection with both customers and underlying systems for shaping the company’s vulnerability management maturity, influencing engineering culture, and safeguarding critical systems. The Senior Staff Security Engineer will drive meaningful, measurable improvements to security posture while enabling teams to build and ship technology with confidence. They demonstrate a keen ability to dive deep into complex problems to fully understand how systems operate, discerning when to make incremental improvements and when to challenge the status quo to drive impactful results.

They are well-versed with Vulnerability Management Lifecycle - asset discovery, internal/external scans, contextualization and risk-based assessment, triaging of CVEs, detection authoring, security data pipeline, reporting, and remediation.

This role is an advisor to the Sr Director and is critical to our cybersecurity objectives. The position requires a strong security and engineering background. The successful candidate will play a key role in maintaining a strong security posture for the company through close collaboration with infrastructure, development, product, and other organizations across GEICO to integrate security into the ecosystem from design through deployment to sustainable operations.

At GEICO’s Cybersecurity organization, we are committed to strengthening the company’s digital resilience and advancing the security of our technology ecosystem. Our mission is to proactively protect our customers, associates, and business by modernizing our security capabilities, elevating our defensive posture, and enabling secure innovation  GEICO transforms its technology landscape, Cybersecurity plays a pivotal role in delivering secure, reliable, and future‑ready solutions that support every line of business and every customer channel—empowering the enterprise with protection that is adaptable, intelligent, and built for the evolving threat landscape.

• Lead the full vulnerability lifecycle: discovery, validation, risk analysis, prioritization, and remediation measurement.

• Leverage business contextualization, underlying systems, and threat intelligence to perform risk assessment for identifying true risk to drive remediation.

• Build integrations among scanning tools, asset inventory, CMDBs, ticketing, CI/CD, and monitoring pipelines to streamline workflows.

• Evaluate, test, and implement emerging tools and technologies that advance VM automation and intelligence.

• Design automation to reduce manual work, increase accuracy, and accelerate remediation.

• Generate data‑driven insights that help teams understand, prioritize, and resolve vulnerabilities efficiently.

• Collaborate with cloud, infrastructure, Dev Ops, and product engineering groups to integrate vulnerability management into pipelines and delivery workflows.

• Work closely with risk, compliance, governance, and incident response teams to ensure alignment with organizational and regulatory standards.

• Communicate…