Senior Engineer - Production Security

Why Join GEICO?

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.

Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge:
Great Company, Great Culture, Great Rewards, and Great Careers.

GEICO is seeking a Senior Security Engineer to strengthen the security of AI-enabled products and the engineering platforms that support them. This role combines product security judgment with hands-on software development.

The engineer will assess designs, review code, build security automation, and partner with engineering and product teams to translate business needs and security requirements into practical, production-ready solutions.

The successful candidate operates effectively with high-level direction, clarifies ambiguous problems, prioritizes competing work, and owns deliverables through completion. This is a Senior Engineer role focused on vital team-level contributions and technical leadership within the team, rather than enterprise-wide architecture ownership.

What You Will DoProvide technical leadership within the team for AI security, product security, secure design, and security engineering work.

Plan, estimate, prioritize, and deliver engineering work to schedule while managing multiple concurrent priorities and context switches.

Design, build, test, deploy, and troubleshoot production-ready security services, integrations, automation, and developer tooling.

Perform threat modeling and security architecture reviews for AI-enabled applications, services, APIs, data flows, agentic workflows, and supporting platforms.

Review code and designs for authentication, authorization, role-based access control, input validation, data protection, logging, error handling, database access, and other security concerns.

Translate business needs, customer feedback, and security requirements into clear technical requirements, implementation plans, and measurable outcomes.

Use data and risk context to recommend priorities and make sound design or configuration decisions, with attention to security, compliance, privacy, reliability, and customer data handling.

Work across engineering, product, platform, risk, and cybersecurity teams to remove blockers, resolve issues, and drive agreed actions to completion.

Proactively identify process, tooling, and control gaps, then implement practical improvements that reduce manual effort and strengthen security outcomes.

Contribute significantly to design, code, security, observability, performance, and operational-readiness reviews using established architecture and engineering guidance.

Document technical decisions, operating procedures, support guidance, and lessons learned so solutions can be maintained and improved by the team.

Help teammates overcome technical obstacles and share knowledge through reviews, pairing, technical discussions, and clear documentation.

AI and Product Security Focus Assess security risks associated with AI models, agents, prompts, retrieval-augmented generation, model context protocols, tools, data sources, memory, and downstream actions.

Apply secure-by-design practices to AI-enabled systems, including least privilege, trustworthy identity, authorization boundaries, input and output controls, secrets protection, audit logging, data…