Hybrid Staff Engineer – Vulnerability Management Automation, Platform and Tools – VMs

at GEICO

• Job title: Staff Engineer – Vulnerability Management Automation, Platform and Tools – VMs
• Job type: Full Time
• Experience level: Lead
• Salary: $110,000 - $230,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Google Cloud Platform, Linux, OpenStack, Packer
• Location requirements: Hybrid, Chevy Chase, United States

About the role

• Staff Engineer responsible for vulnerability management and automation at GEICO. Collaborating with teams to deliver scalable, secure automation solutions for patching and vulnerability lifecycle management.

Responsibilities

• Define the technical roadmap for vulnerability management and patch automation platforms.
• Establish standards, patterns, and paved roads for scanning, triage, remediation, and verification.
• Mentor engineers across Security and Platform teams on software and systems design best practices.
• Drive design reviews, architecture decisions, and quality gates for reliability and security.
• Design and implement services for asset/CMDB enrichment, risk scoring, and intelligent targeting (by business criticality, exposure, blast radius).
• Build controllers/schedulers for maintenance windows, deployment rings/canaries, pre/post checks, automated backoff/rollback, and progressive delivery.
• Deliver self‑service CLIs/SDKs and internal UIs to request, schedule, and track remediation with clear SLAs and audit trails.
• Implement idempotent, policy‑driven workflows for patching and baseline enforcement across Windows and Linux.
• Integrate with image pipelines (e.g., Packer/golden images) to shift‑left patching and hardening.
• Operate and automate patch tooling and package managers with safety guardrails.

Requirements

• 8+ years of professional software or platform engineering experience, including building and operating automation at scale.
• 6+ years administering or engineering for Windows and/or Linux in enterprise environments.
• 4+ years integrating vulnerability scanners and/or building remediation workflows and platforms.
• 3+ years implementing configuration management or hardening frameworks (CIS, STIG) via policy/code.
• Demonstrated leadership driving cross-team adoption and measurable risk reduction.
• 4+ years of hands-on experience with Azure, OpenStack, AWS, GCP, or other cloud services.
• 2+ years working with open-source frameworks.

Benefits

• Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.
• Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
• Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
• Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.