Position: Staff Engineer – Vulnerability Management Automation (Platform and Tools - VMs)
GEICO .
For more information, please .
• Work closely with Platform/SRE, Security, and application engineering teams to plan and execute safe changes.
• Collaborate with product managers and stakeholders to understand risk, requirements, and timelines.
• Communicate complex technical concepts and trade‑offs to both technical and non‑technical audiences.
• Document architecture decisions, patterns, and best practices; present proposals and updates to leadership.
• Define and track SLOs for patch compliance, time‑to‑remediate by severity, change success rate, and re‑open rate.
• Implement observability (metrics/logs/traces), health checks, and alerting across the platform.
• Ensure resilience through canaries, rate limiting, circuit breakers, retries with backoff, and safe rollbacks.
• Establish disaster recovery strategies and conduct game days/chaos testing for critical workflows.
• Maintain compliance with security and regulatory requirements; ensure usability, reliability, security, and performance.
• Troubleshoot and resolve complex issues; fulfill on‑call responsibilities appropriate to the platform.
• Strong software engineering background building production services and tooling (Python or Go preferred; Type Script a plus).
• Deep knowledge of Linux and Windows Server administration and patching in enterprise environments.
• Hands‑on experience with vulnerability scanners and their APIs (Tenable/Nessus, Qualys, Rapid7) and risk models (CVSS, KEV, EPSS).
• Proficiency with configuration management and IaC (Ansible/Puppet/Chef/Salt; Terraform/Pulumi/Crossplane, Helm/Kustomize).
• Experience with event‑driven and batch data pipelines (e.g., Kafka/SNS/SQS/Pub Sub), relational data stores, and caching.
• Familiarity with cloud (AWS/Azure/GCP), containers/Kubernetes, and image pipelines (e.g., Packer).
• Solid understanding of auth
N/auth
Z, secrets management, and least‑privilege access for platforms and automation.
• Excellence in observability and reliability practices (Open Telemetry/Prometheus/Grafana) with an SLO mindset.
• Strong documentation, communication, and stakeholder management skills.
• 8+ years of professional software or platform engineering experience, including building and operating automation at scale.
• 6+ years administering or engineering for Windows and/or Linux in enterprise environments.
• 4+ years integrating vulnerability scanners and/or building remediation workflows and platforms.
• 3+ years implementing configuration management or hardening frameworks (CIS, STIG) via policy/code.
• Demonstrated leadership driving cross‑team adoption and measurable risk reduction.
• 4+ years of hands-on experience with Azure, Open Stack, AWS, GCP, or other cloud services.
• 2+ years working with open-source frameworks.
• Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.
• Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
• Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
• Supports flexibility
- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.
At GEICO,we offer a rewarding career where your ambitions are met with endless possibilities.
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.
Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States.
#J-18808-Ljbffr