Security Engineer – Vulnerability Management

Staff Security Engineer – Vulnerability Management Skip to main contentGEICO uses cookies to help us provide the best experience on GEICO Careers.  By continuing to use our website, you consent to the use of cookies.  For more information, please visit our cookie policy.#Staff Security Engineer – Vulnerability Management page is loaded## Staff Security Engineer – Vulnerability Management Apply remote type:
Hybrid locations:
Seattle, WA:
Palo Alto, CA:
Dallas, TX:
Bethesda, MDtime type:
Full time posted on:
Posted Todayjob requisition :
R0064529
** Why Join GEICO?
** At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.

Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge:
Great Company, Great Culture, Great Rewards, and Great Careers.

GEICO is seeking a highly experienced
** Staff Security Engineer
** to lead the strategy, architecture, and execution of Vulnerability Management across a complex, hybrid technology ecosystem. This role combines deep hands-on engineering expertise with strong ownership, operational rigor, and the ability to influence outcomes across teams.

This role reports directly to the hiring manager and is accountable for delivering measurable improvements in security posture, operational excellence, and engineering maturity.

The position operates as a
** hands-on advisor to the leadership
** while remaining deeply embedded in day-to-day execution. This is not a purely strategic role—the individual is expected to actively contribute to team deliverables, participate in on-call rotations, and take ownership of operational outcomes alongside peers.

Success in this role requires independent leadership, strong judgment, and the ability to consistently drive high-quality outcomes while influencing teams across infrastructure, product, and engineering.
** Key Responsibilities
**** Ownership & Accountability
*** Own outcomes end-to-end with a strong sense of accountability; does not defer responsibility for gaps or failures.
* Drive work to closure with clear ownership of results, timelines, and quality.
* Proactively identify and address risks, gaps, and inefficiencies without waiting for direction.
* Maintain high standards of execution and hold self and others accountable to those standards.
** Operational Excellence, Monitoring & Engineering Excellence
*** Establish and enforce strong operational discipline across services, including monitoring, alerting, and reliability.
* Ensure systems are observable, measurable, and consistently meet defined SLAs/SLOs.
* Drive improvements in availability, performance, and scalability through data-driven decisions.
* Reduce operational toil by simplifying systems, improving automation, and standardizing processes.
* Build and maintain durable pipelines and integrations across asset inventory, scanning, ticketing, and engineering workflows.
* Leverage advanced SQL and data mining techniques to analyze vulnerability, asset, and operational data; generate insights that drive prioritization, risk reduction, and system improvements.
** Security Mindset with Offensive Perspective
*** Apply a security-first engineering mindset from design through production and ongoing operations.
* Drive
** vulnerability research
** by analyzing systems, dependencies, and emerging threats to uncover exploitable weaknesses.
* Operate with an
** offensive security mindset**, proactively identifying and validating real attack paths and risks.
* Lead and evolve
** attack surface and exposure management**, maintaining continuous visibility into internal and external exposure across assets, services, and environments.
* Identify, prioritize, and reduce exposure through improvements in…