Senior Staff Security Engineer leading Vulnerability Management strategy and execution at GEICO. Drive meaningful improvements and mentor teams to ensure robust security posture.
Responsibilities
Lead the full vulnerability lifecycle: discovery, validation, risk analysis, prioritization, and remediation measurement
Leverage business contextualization, underlying systems, and threat intelligence to perform risk assessment for identifying true risk to drive remediation
Build integrations among scanning tools, asset inventory, CMDBs, ticketing, CI/CD, and monitoring pipelines to streamline workflows
Evaluate, test, and implement emerging tools and technologies that advance VM automation and intelligence
Design automation to reduce manual work, increase accuracy, and accelerate remediation
Generate data-driven insights that help teams understand, prioritize, and resolve vulnerabilities efficiently
Collaborate with cloud, infrastructure, DevOps, and product engineering groups to integrate vulnerability management into pipelines and delivery workflows
Work closely with risk, compliance, governance, and incident response teams to ensure alignment with organizational and regulatory standards
Communicate vulnerability trends, risk implications, and remediation strategies to technical and non-technical stakeholders
Define KPIs, SLAs, dashboards, and reporting models to drive accountability and measurable vulnerability reduction
Establish repeatable processes, playbooks, and workflows that ensure consistent VM operations across teams and environments
Ensure the reliability, performance, and scalability of VM tools and data pipelines
Mentor junior and mid-level engineers, offering guidance on advanced security concepts, engineering best practices, and career development
Serve as a multiplier by elevating skillsets across teams through coaching, pairing, design reviews, and knowledge-sharing
Requirements
8+ years of experience in cybersecurity or security engineering roles
Deep expertise with vulnerability management tools, methodologies, and industry standards
Hands-on experience with modern infrastructure, cloud services (AWS/Azure/GCP), container platforms, and operating systems
Proficiency with a modern programming language (Python, Go, Java, etc.) and scripting for automation at scale
Strong understanding of security architecture, networking, operating systems, identity, and cloud services
Proven ability to lead, mentor, and inspire engineers across multiple teams
Strong communication skills with the ability to influence senior stakeholders and translate complex risks into actionable guidance
Hands-on experience implementing cybersecurity frameworks e.g. NIST CSF
Hands-on experience with leading compliance initiatives to meet e.g. PCI, SOX, NYDFS, etc.
Benefits
Comprehensive Total Rewards program
Financial benefits including market-competitive compensation
401K savings plan vested from day one that offers a 6% match
Performance and recognition-based incentives
Tuition assistance
Access to additional benefits like mental healthcare
Product Specialist BDE responsible for advising on Networks and Cybersecurity at Datacom. Supporting development of product strategies and sales ideas to drive customer success.
Security Guard at Commissionaires Nova Scotia ensuring safety, security, and protection for clients. Engaging veteran personnel in critical roles across various environment.
Fachkraft für Schutz und Sicherheit supporting public and private safety while protecting individuals and assets. Engage in preventing conflicts and recognizing dangers across various settings.
Senior Software Engineer at eBay developing cloud - native security services and mentoring teams. Focused on high availability and secure coding practices with a scalable infrastructure.
Project manager for IT infrastructure within IT security projects at DATAGROUP. Engaging in project management and communication with technical teams and clients.
Senior SAP Security Consultant designing future SAP security solutions for clients. Engaging with technological challenges and supporting digital transformation efforts.
Cybersecurity Engineer managing identity and access controls for enterprise applications at Truist. Expertise in Microsoft Entra and troubleshooting access issues in complex environments.
Cybersecurity Compliance Consultant performing SOX IT compliance testing at Truist. Assessing corporate cybersecurity compliance and managing risk and compliance functions across various locations.
IT Security Consultant conducting technical audits and consulting on cybersecurity for various sectors. Developing tailored security strategies and ensuring compliance with regulations.
Senior Consultant in IT Security conducting audits and creating security strategies. Advising clients in cybersecurity and ensuring compliance with regulations.