Sr. Staff Security Engineer – AI, VMR, Offensive Security

GEICO; Seattle (WA); On-site; USD 120,000 - 260,000; Full time

Job summary

GEICO is looking for a Senior Staff Security Engineer to oversee Vulnerability Management and Offensive Security strategy within a complex technology ecosystem. This position involves leveraging AI models to enhance security, mentoring engineers, and collaborating closely with various teams.

The ideal candidate will possess extensive experience in cybersecurity and vulnerability management, alongside strong communication skills to influence senior stakeholders. Compensation ranges from $120,000 to $260,000 annually, depending on qualifications.

Qualifications

• 10+ years of experience in cybersecurity or security engineering.
• Deep expertise with vulnerability management tools and methodologies.
• Strong understanding of cloud services and security architecture.
• Proficiency in a modern programming language and scripting.

Responsibilities

• Lead the strategy for Vulnerability Management and Offensive Security.
• Integrate security into the technology ecosystem from design to operations.
• Mentor junior and mid-level engineers on advanced security concepts.
• Define KPIs and reporting models for vulnerability reduction.

Skills

Cybersecurity

Vulnerability Management

Hands-on experience with cloud services

Programming (Python, Go, Java)

Communication skills

Mentoring

Education

Bachelor’s degree in computer science or Cyber Security

Tools

AWS

Azure

GCP

Vulnerability management tools

Job description

Position Overview

GEICO is seeking a highly experienced Senior Staff Security Engineer to lead the strategy and technical execution of Vulnerability Management and Offensive Security across a complex hybrid technology ecosystem. This role blends deep security engineering expertise with strong architectural leadership, hands‑on experience, leveraging frontier AI models for security, driving customer success, and providing advisory to senior executive leaders. This high‑impact hands‑on technical role maintains a strong connection with both customers and underlying systems to shape the company’s vulnerability management maturity, influence engineering culture, and safeguard critical systems. The Senior Staff Security Engineer will drive measurable improvements to security posture while enabling teams to build and ship technology with confidence. They drive customer success for the vulnerability management and offensive security functions, and serve as an advisor to executive leadership, playing a key role in maintaining a strong security posture through close collaboration with infrastructure, development, product, and other organizations across GEICO to integrate security into the ecosystem from design through deployment to sustainable operations.

VM & OffSec Execution

• Lead the strategy and technical execution of Vulnerability Management, Offensive Security, and AI-augmented security at scale.
• Lead the full vulnerability lifecycle: discovery, validation, risk analysis, prioritization, and remediation measurement.
• Leverage business contextualization, underlying systems, threat intelligence, and AI frontier models to perform risk assessment for identifying true risk to drive remediation.
• Integrate scanning tools, asset inventory, CMDBs, ticketing, CI/CD, and monitoring pipelines to streamline workflows.
• Evaluate, test, and implement emerging AI technologies that advance automated discovery and remediation.
• Design automation to reduce manual work, increase accuracy, and accelerate remediation.
• Generate data‑driven insights that help teams understand, prioritize, and resolve vulnerabilities efficiently.

Cross‑Functional Partnership

• Drive customer success for the vulnerability management and offensive security functions.
• Play role of an advisor to senior executive leadership.
• Collaborate with cloud, infrastructure, DevOps, and product engineering groups to integrate vulnerability management into pipelines and delivery workflows.
• Work closely with risk, compliance, governance, and incident response teams to ensure alignment with organizational and regulatory standards.
• Communicate vulnerability trends, risk implications, and remediation strategies to technical and non‑technical stakeholders.

Operational Excellence & Measurement

• Define KPIs, SLAs, dashboards, and reporting models to drive accountability and measurable vulnerability reduction.
• Establish repeatable processes, playbooks, and workflows that ensure consistent VM operations across teams and environments.
• Ensure the reliability, performance, and scalability of VM tools and data pipelines.

Leadership, Mentoring & Team Development

• Mentor junior and mid‑level engineers, offering guidance on advanced security concepts, engineering best practices, and career development.
• Serve as a multiplier by elevating skillsets across teams through coaching, pairing, design reviews, and knowledge‑sharing.
• Influence architecture and engineering leadership with clear communication, strong decision‑making, and the ability to simplify complex security issues.

Required Qualifications

• 10+ years of experience in cybersecurity or security engineering roles.
• Deep expertise with vulnerability management tools, methodologies, and industry standards.
• Hands‑on experience with modern infrastructure, cloud services (AWS, Azure, GCP), container platforms, and operating systems.
• Proficiency with a modern programming language (Python, Go, Java, etc.) and scripting for automation at scale.
• Strong understanding of security architecture, networking, operating systems, identity, and cloud services.
• Proven ability to lead, mentor, and inspire engineers across multiple teams.
• Strong communication skills with the ability to influence senior stakeholders and translate complex risks into actionable guidance.
• Hands‑on experience implementing cybersecurity frameworks, e.g., NIST CSF.
• Hands‑on experience with leading compliance initiatives to meet e.g., PCI, SOX, NYDFS, etc.

Preferred Qualifications

• Exposure to comprehensive security assessment, penetration testing, threat modeling, or security research.
• Familiarity with SIEM, SOAR, and asset intelligence integrations.
• Security certifications (CISSP, GCSA, OSCP, cloud security certs) are a plus.
• Experience embedding security controls into CI/CD pipelines and DevSecOps workflows.

Education

• Bachelor’s degree in computer science, Cyber Security, or equivalent education with relevant work experience.

Annual Salary

$120,000.00 - $260,000.00

The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.

At this time, GEICO will not sponsor a new applicant for employment authorization for this position.

Equal Employment Opportunity Statement

The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.

GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.