Senior Staff DLP Security Engineer (REMOTE)

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. 

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose. 

When you join our company, we want you to feel valued, supported and proud to work here. That’s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.

GEICO is seeking a Sr Staff DLP Security Engineer to provide strategic and technical direction for our user, development and production environments. You will proactively and holistically drive, lead, and support, Security detection and prevention strategies with proof and validation of our controls in the various messaging platforms and data loss prevention technologies. 

We see collaboration as a combination of traditional email, modern chat and conferencing systems our users and partners use every day. From users, third-party, production systems or elsewhere to integrations and governing our identified policies.  We need an expert to join our team and apply high confidence, low friction security across the collaboration spectrum.

Our Sr Staff Engineer works with Staff and Sr. Engineers to innovate and lead new initiatives, improve Security, and enhance existing systems while also identifying new opportunities with an insider threat mindset to find critical risk and solve at a rapid pace. You will help lead the confirmation our systems are protected through continuous improvement and automated testing to raise the bar and foster a proactive security culture which also enables the business without impact. The ideal candidate has deep technical expertise in this domain and an attacker/defender adversarial background.

​​​As a Sr Staff Engineer, you will: 

• Design, implement, and develop advanced email security solutions to protect email systems from cyber threats, including phishing, malware, data exfiltration and other attacks.

• Monitor and analyze traffic for signs of malicious activity, employing advanced threat detection techniques.

• Help to develop and enforce messaging security policies, standards, and procedures with automation and the support your team.

• Conduct regular security assessments without disrupting the operational excellence of various messaging systems.

• Provide expert guidance and recommendations on collaboration security best practices to stakeholders.

• Works in lockstep with our CSIRT teams to ensure protection coverages, proper detection event notifications, documentation and standards we can all use.

• Determine and implement DLP improvements and enhancements to increase data security and efficiency.

• Ensure compliance with data protection laws, regulations, and standards, such as GDPR, CCPA, HIPAA, and PCI DSS.

• Generate and deliver reports and metrics to management and stakeholders on the effectiveness of our protective solutions in messaging and data loss prevention.

• Define roadmaps for securing collaboration system with purposeful and functional security without impacting or unnecessary overhead.

• Proactively identify opportunities to enhance security measures, streamline processes, and optimize tooling to fortify our environment against emerging threats.

• Help develop and implement policies, standards, and guidelines to ensure compliance with industry regulations and frameworks, promoting security as an integral part of our operation by partnering with external teams and their leadership.

• Deliver automation initiatives, conduct advanced research, and develop proofs of concept to enhance our security capabilities and improve overall efficiency.

Qualifications

• Extensive experience in security products and frameworks: SEG, O365, CASB, DLP, DSPM and related endpoint controls.

• Experience with data protection laws, regulations, and standards.

• Experience communicating and presentation to senior and junior staff with the ability to influence stakeholders.

• Experience in a multi-platform environment with Linux, Mac, Windows.

• In-depth knowledge of email security protocols (e.g., SMTP, DMARC, DKIM, SPF) and encryption technologies.

• Proficiency with email, CASB and DLP security tools and platforms (e.g., Proofpoint, Mimecast, Abnormal, ForcePoint, Microsoft Defender, Zscaler)

• Experience with multiple IaaS platforms from top tier providers.

• ​Experience with solving security control requ