Senior Engineer - Open Source Software Security

GEICO is seeking a Senior Engineer – Open-Source Software Security who is a highly skilled security professional that can influence the secure design, testing, and implementation of advanced and comprehensive security systems in an open-source environment. This role requires a deep understanding of open-source software, cybersecurity threats, and security frameworks. The individual will be responsible for ensuring the usage of open-source in the company's software and Systems is secure from potential threats, known vulnerabilities, potential malicious dependencies and supply chain threats.

Description:
The Senior Engineer – Open-Source Software Security role is a challenging yet rewarding position that requires a strong technical background, leadership skills, and a deep understanding of open-source software and cybersecurity. The successful candidate will play a key role in ensuring the security and integrity of the company's open-source software and systems.

Responsibilities:
As a Senior Engineer, you will:

• Evaluate, test, implement and manage open-source security tools and technologies

• Perform regular security audits, risk assessments, and anomaly detection

• Develop and maintain security policies, protocols, and procedures

• Conduct advanced security research on the latest open-source threats,  vulnerabilities, and mitigation strategies

• Collaborate with software development teams to ensure secure coding practices are followed

• Respond to security incidents and breaches swiftly and professionally

• Provide training and guidance on security practices and technologies to other associates

• Stay up-to-date with the latest security news, advisories, incidents, and penetration techniques

• Oversee contribution to the open-source community for published security findings, patches, and modules

• Mentor junior security engineers and provide leadership in security planning and strategy

Qualifications:

• Proven experience as a Security Engineer or similar role in an open-source environment

• Deep understanding of open-source software, licensing, and ecosystem. Including understanding the risks in using open source

• Knowledge of risk assessment tools, technologies, and methods

• Proficiency in scripting and programming languages such as Python, Java, 

• or C++, JavaScript, .NET

• Understanding of threats, threat modeling, and the applicability to our business systems

• Familiar with strategic and emerging security / cloud / application / open-source security trends, and the practical application of existing and emerging technologies to new and evolving business and operating models

• Understanding and applied use of OWASP Top 10, NIST CSF, PCI-DSS, etc.

• Excellent understanding and knowledge of application development life cycle methodologies such as agile software development, rapid prototyping, incremental, synchronize and stabilize, and DevSecOps

Experience:

• 5+ years of experience in application and open-source security

Education: 

• Bachelor's degree in Computer Science, Information Systems, or a related field 

• Security-related certifications (such as CISSP, CISM, or CompTIA Security+) are a plus

Benefits:

At GEICO, we make sure you have the support and resources to leverage and develop your skills, secure your financial future, and take care of your health and well-being. GEICO continually seeks to provide a workplace where everyone can be their authentic self. To help achieve this goal, we support associate-led Employee Resource Groups that foster a true sense of community. Through GEICO’s competitive benefits offerings and various training and development opportunities, we have you covered with our Total Rewards Program* that includes:

• Premier Medical, Dental and Vision Insurance with no waiting period**

• Paid Vacation, Sick and Parental Leave

• 401(k) Plan

• Tuition Assistance including Direct Billing and Reimbursement payment plan options

• Paid Training, Licensures and Certificates

*Benefits may be different by location. Benefit eligibility requirements vary and may include length of service. 

**Coverage begins on the date of hire. Must enroll in New Hire Benefits within 30 days of the date of hire coverage to take effect.

GEICO is proud to be an equal opportunity employer. We are committed to cultivating an environment where equal employment opportunities are available