Staff Cyber Security Engineer - GRC Automation (REMOTE)

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. 

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose. 

When you join our company, we want you to feel valued, supported and proud to work here. That’s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.

Staff Security Engineer (Cyber Governance Engineering)

A Staff Security Engineer works with GEICO engineering teams to innovate and build new processes, systems, improve and enhance existing systems and identify new opportunities to apply your knowledge to solve critical problems.  You will lead the development of an Automated Continuous compliance platform for GEICO Cybersecurity Governance team, which enables real time evidence collection, identifying non-compliance with policies early and provides the team with remediation guidelines in an automated scalable way to reduce the audit fatigue and improve the developer experience.  You will collaborate with developers, engineers, and compliance & security teams across GEICO to institute the programmatic controls vital for the program. You will partner with application security, platform security, SRE, central security and compliance groups at GEICO to craft and roll out controls, processes, automate collection of evidence and create dashboard on the security posture of GEICO.

• Lead the Cyber Governance automation for automated evidence collection and reporting on automated adherence to information security policies
• Design the Automated Governance Solution including creating requirements and partner with key stakeholders to implement the solution
• Maintain, mature and enhance the Automated Governance Solution to attain a high NPS scores.
• Provide technical leadership for Cyber Governance program strategy, automation, integration with Cyber and IT technologies/Services.
• Execute on the Automated Governance Platform with understanding of the information security policies, security standards, security technologies, GEICOs environment (multi-cloud, on-prem) structure and compliance obligations.
• Collaborate with engineering teams to define the overall system architecture, ensuring scalability and performance optimization.
• Collaborate across teams and across the organization to solve our toughest problems
• Solve audit fatigue and improve operational rigor
• Ensure we meet regulatory compliance with evidence in a scalable manner
• Determine complimentary products and solutions to scale and expedite overall automation goals
• Partner with cloud technical teams (Azure, GCP, AWS, etc.) to deliver a successful outcome
• Influence and educate partner teams to bring an engineering first approach to develop sustainable processes to adhere to policies
• Comfortable rolling up your sleeves to design and code for automated, continuous compliance
• Solve specific security and business problems through automation, utilizing code, and integrating cloud-native and tools via API.
• Work closely with various teams to drive feature innovation based upon customer needs.
• Utilize programming languages like Python, C# or other object-oriented languages, SQL, and NoSQL databases, Container Orchestration services including Docker and Kubernetes, and a variety of Azure tools and services
• Follow GEICOs developer standards and guidelines
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact dependent systems
• Be a role model and mentor, helping to coach and strengthen the technical expertise and know-how of our engineering and product community
• Influence and educate executives
• Consistently share best practices and improve processes within and across teams
• Determine and support resource requirements, evaluate operational processes, measure outcomes to ensure desired results, demonstrate adaptability and sponsor continuous learning

Qualifications

• Programming experience with at least one modern language such as Java, C++, or C# including object-oriented design
• Experience contributing to the architecture and design (architecture, design patterns, reliability, and scaling) of new and current systems
• Understanding of existing Operational Portals such as Azure Portal
• Understanding of HTML-5, JavaScript/TypeScript, XML, and JSON
• Understanding of Azure Network such as security zones, VNETs, and Public Peered Services
• Understanding of Azure PaaS and IaaS services