Senior Cyber Security Engineer - GRC Automation (REMOTE)

GEICO; Chevy Chase (MD); Remote; USD 75,000 - 230,000; Full time

Job summary

GEICO is seeking a Security Engineer to optimize its cybersecurity governance program. This role involves leading automation efforts, collaborating with multiple teams, and creating a unified security controls framework. The ideal candidate will have extensive programming experience and a strong background in security compliance frameworks.

Benefits

Flexible work options

Training and development opportunities

Recognition programs

Qualifications

• 5+ years in security compliance frameworks.
• Understanding of Azure security features like VNETs.
• Experience with data center structures and Azure platform services.

Responsibilities

• Lead automation efforts for security governance.
• Develop roadmap for automating security controls.
• Collaborate with teams to implement security solutions.

Skills

Collaboration

Problem Solving

Communication

Education

Bachelor's Degree or equivalent experience

Tools

Python

Docker

Kubernetes

Azure Portal

Job description

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day, we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose.

When you join our company, we want you to feel valued, supported, and proud to work here. That’s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards, and Great Careers.

GEICO is seeking a Security Engineer to optimize our organization's cybersecurity governance program. You will lead building automation in cyber governance by designing and implementing continuous monitoring and reporting of information security controls across the enterprise for all GEICO applications and services.

You will collaborate with developers, engineers, and compliance & security teams across GEICO to establish controls vital for the program. You will partner with application security, platform security, SRE, central security, and compliance groups at GEICO to craft and roll out controls, conduct gap assessments, automate evidence collection, and flag non-compliance with policies in real time.

As a Security Engineer, you will:

• Lead automation efforts by understanding information security policies, standards, technologies, and GEICO’s environment (multi-cloud, on-prem).
• Create a roadmap and prioritized plan for automating security controls for continuous monitoring.
• Define control language, evidence requirements, and asset scope for automation.
• Develop a unified security controls framework aligned with standards such as NIST CSF 2.0, PCI, NY DFS, SOX, etc., to streamline evidence collection.
• Collaborate with control owners, governance, and compliance teams on automation initiatives.
• Identify products and solutions to scale and expedite automation goals.
• Partner with cloud teams (Azure, GCP, AWS) to ensure successful implementation.
• Design and code modules for infrastructure, applications, and processes as needed.
• Address security and business challenges through automation, coding, and API integration.
• Communicate requirements, results, and recommendations effectively.
• Educate stakeholders on solutions and opportunities.
• Work closely with teams to drive innovation based on customer needs.
• Utilize programming languages like Python, C#, SQL, NoSQL, and cloud-native tools such as Docker and Kubernetes.
• Share best practices and improve processes continuously.
• Follow GEICO’s developer standards and guidelines.

Qualifications:

• Programming experience with modern languages such as Java, C++, or C#.
• Experience in system architecture, design patterns, and scalability.
• Deep knowledge of data structures and algorithms.
• Familiarity with Azure Portal and related operational tools.
• Understanding of HTML5, JavaScript/TypeScript, XML, JSON.
• Knowledge of microservices architecture and REST APIs.
• Understanding of Azure security features like VNETs and security zones.
• Experience with Azure PaaS and IaaS services.
• Knowledge of security protocols such as Active Directory, SAML, OAuth.
• Experience with data center structures and Azure platform services.
• Proficiency with software development lifecycle tools.
• 5+ years in security compliance frameworks.
• Expertise in standards like SOX, PCI-DSS, ISO27K, SOC, NIST.
• Strong collaboration and problem-solving skills.
• Excellent written communication and research skills.
• Ability to build relationships across teams and levels.
• Ability to resolve conflicts and drive issues to resolution.
• Ability to work independently with minimal supervision.
• Bachelor's Degree or equivalent experience preferred.

Salary Range:

$75,000 - $230,000 annually. This range is a guideline, with final offers based on experience, education, location, and market factors.

GEICO considers sponsorship for employment authorization for qualified applicants.

The GEICO Pledge:

Great Company: We help our customers through life’s twists and turns, constantly evolving to meet their needs.

Great Careers: We provide growth and development opportunities through training, mentorship, and coaching.

Great Culture: We foster an inclusive environment rooted in integrity, action, and shared success.

Great Rewards: Our compensation and benefits support your health, well-being, and financial future, including flexible work options and recognition programs.

GEICO is an equal opportunity employer committed to diversity and inclusion. We provide accommodations for applicants with disabilities.