GEICO
At a Glance
Why Join GEICO?
At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.
Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge: Great Company, Great Culture, Great Rewards, and Great Careers.
GEICO is seeking an experienced full-stack engineer with a deep technical expertise and passion for building high-performance, low maintenance, zero-downtime, and highly scalable systems. The ideal candidate has a proven track record of design, development, and implementation of scalable solutions in hybrid environments using commercial and open-source products, preferably in Cybersecurity domain. This role will be responsible for leading enterprise initiatives and collaboration with cross-functional teams as well as designing and implementing secure and scalable solutions to drive Vulnerability Management initiatives.
As a Senior Staff Engineer, you’re not just a technical expert—you’re a lead, a problem solver, an innovator who thrives in a fast-paced, constantly evolving environment. You will turn complex security challenges into elegant, practical solutions while fostering collaboration across teams and stakeholders.
Senior Staff Engineer works closely with infrastructure, development, product managers, and other organizations across GEICO to integrate security into the ecosystem from design through deployment to sustainable operations. The Staff Engineer brings in expertise in requirements identification, feasibility analysis, secure infrastructure designs, technology evaluation and selection, and implementation of scalable systems using CI/CD and DevSecOps to raise the bar on engineering excellence and security best practices.
As a Senior Staff Engineer, you will:
Provide technical leadership for cybersecurity program strategy, software development, integration decisions, analyzing design constraints and trade-offs in system and security design
Lead design, development, and delivery of security solutions to drive Vulnerability Management initiatives.
Deliver automation initiatives, conduct advanced research, and develop proofs of concept to enhance our security capabilities and improve overall efficiency
Achieve security business outcomes through force multiplication
Develop, integrate, and maintain multilevel cybersecurity designs, architectures, policies, and procedures
Provide secure design guidance and recommendations to developers, infrastructure, and product engineers
Influence and educate partner teams to bring an engineering first approach to develop sustainable security systems.
Mentor peers and team members in security technologies, enterprise solution design, deployment, and effective customer interaction
Provide motivating demonstrations and communications to show the value of our security measures to the business, highlighting the low impact on systems, improved operability and resiliency
Qualifications
Tech-lead with full-stack software development and DevSecOps experience in a hybrid environment (AWS, Azure, on-prem)
Development and leadership in Cybersecurity domain, preferably in Vulnerability Management Engineering
Specialization with at least one modern language such as Java, Go, Python or C#, and a scripting language
Extensive knowledge and experience of building data intensive large-scale distributed systems on cloud
Experience building the architecture and design of new and current systems (architecture, design patterns, reliability, and scaling)
Fluency in DevOps concepts and best practices in CI/CD pipelines and infrastructure as a code
Experience with application performance monitoring tools and performance assessments
Ability to design, implement, deploy, and operate systems to solve complex security problems in a fast-paced, startup-like environment
Experience
8+ years of non-internship professional software engineering experience of building large-scale distributed systems
4+ years of experience with architecture and design in a tech lead role
4+ years of experience with AWS, GCP, Azure, or other cloud providers
3+ years of experience in open-source frameworks
Foundational knowledge of security best practices for system design and development
Education
Bachelor’s degree in Computer Science, Information Systems, or equivalent education with work experience
Annual Salary
$100,000.00 - $260,000.00The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.
At this time, GEICO will not sponsor a new applicant for employment authorization for this position.The GEICO Pledge:
Great Company: Protecting customers through life’s twists and turns with innovation and integrity.
Great Careers:Personalized development programs, mentorship, and certification assistance.
Great Culture:Inclusive and collaborative culture rooted in shared success.
Great Rewards:Competitive pay, benefits, and flexibility to support your well-being and future.
The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.
GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.
Source: GEICO careers · View original posting
GEICO, or Government Employees Insurance Company, is a leading auto insurer in the U.S., founded in 1936. Initially targeting federal government employees and military personnel, GEICO has grown to serve the general public across all 50 states and the District of Columbia. The company has a strong history of innovation, being one of the first to adopt computerized systems for sales and claims, and it offers 24/7 customer support. GEICO primarily provides auto insurance for both private and commercial vehicles. In addition to auto coverage, it also offers homeowners, renters, and boat insurance through its GEICO Insurance Agency. The company emphasizes customer convenience with mobile apps for quoting and purchasing policies, as well as drive-in claims offices and walk-in sales locations. With over 28 million vehicles insured, GEICO is committed to accessibility and customer care.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Key Initiatives
No public evidence was found for a Security Champions program at GEICO. 'Shift Left' practices are indicated by 'full SDLC including CI/CD' and 'Providing a golden path for application construction and deployment'. The vulnerability management process involves developing 'automated reporting/tracking of findings identified during testing activities, following up with remediation teams' and ensuring 'penetration testing activities are meeting security and business objectives ... establishing metrics & KPIs'. Secure SDLC artifacts include 'initial shared functionality and full SDLC including CI/CD'. Recent initiatives (last 6 months as of) include hiring for Offensive Security leadership and public LinkedIn activity from Product Security leader Katie W. Gaps include no public, detailed vulnerability intake-to-remediation SLAs or explicit ticketing tool references, and no public statement naming a bug bounty provider.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on GEICO's site