Staff Cybersecurity Email Engineer

GEICO’s Cybersecurity organization has an exciting opportunity for an accomplished Staff Cybersecurity Email Engineer. This individual will play a key role within GEICO’s Cybersecurity Security Team, with a focus on the Secure Email Gateway. 

Position Description:

Our Staff Cybersecurity Email Engineer is responsible for leading the organization's efforts to identify, assess, and evaluate potential threats to the organization's information systems, networks, and sensitive data. This includes conducting regular assessments, recommending controls, and countermeasures to mitigate identified risks, and monitoring the effectiveness of the implemented security measures. This role also acts as an expert and mentor for other engineers in the organization and may be involved in developing and managing the overall data security and protection program.

Position Responsibilities

As a Staff Engineer, you will:

• You will collaborate with product management, engineering and executive leadership to help define roadmaps, drive design and implement services

• Build a world class email security solution, influence critical decisions on technology, architecture, and integration

• Assess the existing Cybersecurity Infrastructure platforms and tools

• Evaluate and harden tooling and instrumentation to prevent cybersecurity exploits.

• Perform and/or coordinate regular security assessments of existing or new infrastructure.

• Works with stakeholders to provide email security solutions that support their business requirements

• Identify security gaps that expose a company to potential exploits and develop short and long term prioritized remediations to address those gaps ensuring management is apprised of the risk in a timely manner

• Develop and maintain email security policies, procedures, standards, and ensure that they are followed by the entire organization

• Act as an expert and mentor for other email security engineers in the organization, providing guidance and support security assessment methodologies, techniques, and best practices

• Represent the organization in external meetings and interactions with clients, stakeholders, and other industry experts

• Stay up-to-date on the latest cybersecurity trends, technologies, and best practices

Qualifications: 

• Proficient in modern software architectural principles and distributed system design patterns

• High degree of ethics/confidentiality required

• Experience with Email Security technologies, best practices, and workflows

• Experience with Email Filtering, Encryption, Sandboxing, and DLP technologies such as Proofpoint

• Experience implementing strong Email Security infrastructure using DMARC, DKIM, SPF, and DNSSEC records

• Experience implementing and hardening mail relay systems such as Postfix

• Experience managing external domain registrations

• Strong prioritization and investigative skills

• Ability to work effectively, independent of assistance or supervision

• Innovative, creative, and extremely responsive, with a strong sense of urgency

• Willing to share knowledge and assist others in understanding technical and business topics.

• Scheduling flexibility to meet the needs of the business; may include evenings, weekends, and holidays

• One or more of the following Cybersecurity certifications are highly desired: Certified Information System Security Professional (CISSP) or Certified Information Security Manager (CISM), Security+

Experience:

• 6+ Years of Information Security Engineering Experience

• 5+ Years of Email Security Experience at an Enterprise Level

• 3+ Years of scripting/programming languages (PowerShell, shell scripting, python, etc.) a plus

• Experience developing, deploying, maintaining applications using public cloud providers (AWS/GCP/Azure)

• Experience implementing controls for various cybersecurity & regulatory frameworks such as NIST, PCI, SOX, or HIPAA

• Advanced working knowledge of Authentication protocols such a