Senior Cyber Threat Intelligence Engineer; HYRBID

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose.

When you join our company, we want you to feel valued, supported and proud to work here. That’s why we offer The GEICO Pledge:
Great Company, Great Culture, Great Rewards and Great Careers.

As a Senior Cyber Threat Intelligence Engineer
, you will function as a deeply technical individual contributor responsible for advancing intelligence-driven threat detection and proactive threat hunting across GEICO’s environment. This role requires extensive hands‑on experience, strong analytic judgment, and the ability to independently execute complex work that directly contributes to reducing cyber risk. You will be expected to operate with a high degree of autonomy, applying your technical expertise to identify adversary behavior, develop actionable insights, and drive meaningful outcomes without requiring close supervision.

This is a hybrid position and requires regular in‑office presence at a GEICO location. Fully remote candidates will not be considered for this role.

This position is designed for professionals who can independently own work from initial problem identification through execution and delivery. You will be expected to define intelligence and hunting objectives, assess ambiguous and evolving threat scenarios, and apply expert‑level technical judgment to determine appropriate courses of action. Your work will directly influence detection strategies and response efforts through the intelligence you produce, the tools and automation you develop, and the analytic conclusions you draw from complex data sets.

In addition to hands‑on technical execution, this role carries an expectation of technical leadership. Senior Cyber Threat Intelligence Engineers are trusted contributors whose outputs are relied upon by stakeholders across security teams. You will be expected to set a high bar for analytic quality, provide thoughtful peer review, and mentor junior analysts through direct collaboration, technical guidance, and example.

• Analyze and assess advanced cyber threats, adversary behavior, tooling, and campaigns relevant to GEICO
• Develop and execute intelligence‑informed threat‑hunting hypotheses using endpoint, network, and cloud telemetry
• Build, maintain, and enhance custom tools, scripts, and automation to support intelligence analysis and hunting workflows
• Use programming and scripting languages (e.g., Python, Power Shell, Bash, or similar) to analyze data, enrich intelligence, and automate manual processes
• Translate threat intelligence into actionable detection logic, investigative guidance, and response context
• Produce clear, well‑structured written intelligence products, including assessments, briefings, and reports for both technical and non‑technical audiences
• Support active investigations by providing timely adversary context during incidents
• Track emerging threats, vulnerabilities, and adversary trends, prioritizing relevance and impact
• Continuously improve analytic tradecraft, tooling, and processes to increase effectiveness and efficiency

• 7+ years of experience in cyber threat intelligence, threat hunting, security operations, or a related cybersecurity discipline
• Demonstrated hands‑on experience conducting threat hunting in enterprise environments
• Strong coding or scripting experience with the ability to design and maintain custom tools
• Proven experience applying adversary frameworks such as MITRE ATT&CK to real‑world detection and analysis
• Experience producing written intelligence products that inform technical teams and leadership
• Deep understanding of attacker techniques, intrusion workflows, malware, and phishing operations
• Experience working with SIEM, EDR, and threat intelligence platforms
• Ability to work independently, manage competing priorities, and deliver results under time…