Staff Engineer

Senior Staff Security Engineer – Vulnerability Management

GEICO is seeking a highly experienced Senior Staff Security Engineer to lead the...

Location

United States , Chevy Chase; Palo Alto; Seattle

Salary:

130000.00 - 260000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

8+ years of experience in cybersecurity or security engineering roles
Deep expertise with vulnerability management tools, methodologies, and industry standards
Hands‑on experience with modern infrastructure, cloud services (AWS/Azure/GCP), container platforms, and operating systems
Proficiency with a modern programming language (Python, Go, Java, etc.) and scripting for automation at scale
Strong understanding of security architecture, networking, operating systems, identity, and cloud services
Proven ability to lead, mentor, and inspire engineers across multiple teams
Strong communication skills with the ability to influence senior stakeholders and translate complex risks into actionable guidance
Hands-on experience implementing cybersecurity frameworks e.g. NIST CSF
Hands-on experience with leading compliance initiatives to meet e.g. PCI, SOX, NYDFS, etc.
Bachelor’s degree in computer science, Cyber Security, or equivalent education with relevant work experience

Job Responsibility

Lead the full vulnerability lifecycle: discovery, validation, risk analysis, prioritization, and remediation measurement
Leverage business contextualization, underlying systems, and threat intelligence to perform risk assessment for identifying true risk to drive remediation
Build integrations among scanning tools, asset inventory, CMDBs, ticketing, CI/CD, and monitoring pipelines to streamline workflows
Evaluate, test, and implement emerging tools and technologies that advance VM automation and intelligence
Design automation to reduce manual work, increase accuracy, and accelerate remediation
Generate data‑driven insights that help teams understand, prioritize, and resolve vulnerabilities efficiently
Collaborate with cloud, infrastructure, DevOps, and product engineering groups to integrate vulnerability management into pipelines and delivery workflows
Work closely with risk, compliance, governance, and incident response teams to ensure alignment with organizational and regulatory standards
Communicate vulnerability trends, risk implications, and remediation strategies to technical and non‑technical stakeholders
Define KPIs, SLAs, dashboards, and reporting models to drive accountability and measurable vulnerability reduction

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Staff Software Engineer, Vulnerability Management

GEICO is seeking an experienced full-stack engineer with a deep technical expert...

Location

United States , Chevy Chase; Palo Alto; Seattle; Renton

Salary:

115000.00 - 230000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Tech-lead with data engineering and software development experience in a hybrid environment (AWS, Azure, on-prem)
Proficiency in at least one modern programming language (Python, Java, Scala, Go) and deep experience building scalable production-grade data services, APIs, or ingestion frameworks
Expertise in designing, building, and operating large‑scale, resilient, and high‑performance data pipelines across distributed systems, with strong knowledge of ETL/ELT patterns, data orchestration, and data quality frameworks
Advanced proficiency in modern data storage and processing technologies, including SQL/NoSQL databases (e.g., PostgreSQL), query optimization, and data modeling for analytical and operational use cases
Hands‑on experience with reporting and analytics tools such as Power BI, Tableau, or equivalent, including developing semantic models, optimizing reporting datasets, and enabling business teams with curated data
Strong applied skills in distributed compute ecosystems (e.g., Spark or similar), and the ability to optimize workloads for performance, cost efficiency, and reliability
Extensive knowledge and experience of building data intensive large-scale distributed systems on cloud
Experience building the architecture and design of new and current systems (architecture, design patterns, reliability, and scaling)
Fluency in DevOps concepts and best practices in CI/CD pipelines and infrastructure as a code
Experience with application performance monitoring tools and performance assessments

Job Responsibility

Lead software design, development, and delivery of integrated systems to drive Vulnerability Management initiatives
Deliver automation initiatives, conduct advanced research, and develop proofs of concept to enhance our capabilities and improve overall efficiency
Achieve business outcomes through force multiplication
Develop, integrate, and maintain multilevel cybersecurity designs, architectures, policies, and procedures
Provide secure design guidance and recommendations to developers, infrastructure, and product engineers
Influence and educate partner teams to bring an engineering first approach to develop sustainable security systems
Mentor peers and team members in security technologies, enterprise solution design, deployment, and effective customer interaction
Provide motivating demonstrations and communications to show the value of our security measures to the business, highlighting the low impact on systems, improved operability and resiliency

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Sr. Staff Engineer, Operations Engineer

At GEICO, we offer a rewarding career where your ambitions are met with endless ...

Location

United States , Seattle; Palo Alto; Chevy Chase

Salary:

130000.00 - 260000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Infrastructure technologies knowledge in a hybrid cloud environment such including Containerization, VMs, CI/CD pipeline, IaC
Extensive experience in engineering and solution delivery in a dynamic service provider environment
Strong program and project management skills with proven experience coordinating projects across multiple teams, with successful project/product delivery at scale
Working knowledge of security services and their impact on production systems including runtime protection services, detective and protective agents and/or daemon sets, vulnerability and application scanning, etc.
Experience in a multi-platform environment with Linux, Mac, Windows
Experience communicating and presentating to senior and junior staff with the ability to influence stakeholders
Detail and deadline oriented with effective organizational and analytic skills
Strong critical thinking, problem solving, decision making, and analytical skills
Outstanding time management skills and attention to detail
Excellent verbal/written communication skills, including the ability to clearly document findings, proposals, issues, and status

Job Responsibility

Monitor and track signals of security gaps, initiative delays, compliance risks due to system issues, and drive resolution
Create visuals on current state of the union related to security engineering
Help to develop standards on reporting tool effectiveness, maturity, resilience and other factors in determining risks as they come up
Help drive automation of routine tasks to drive growth in security protection and detection technologies
Provide expert guidance, demonstrations and lead discussions on security best practices to stakeholders and leadership
Works in lockstep with our CSIRT, GRC, Tech and partner teams to ensure protection coverages, proper detection event notifications, documentation and standards we can all use
Organize, store and manage operational best practices documentation for security solutions to protect our platforms including endpoint, cloud, collaboration, identity and network
Partner with the project sponsors, delivery teams, and stakeholders to deliver quality solutions on time and within budget by coordinating project activities across multiple systems, departments, and teams
Create, maintain, and actively manage a detailed project schedule, change control process, and documentation
Identify and raise appropriate security risks, in addition to presenting detailed and implementable solutions or alternatives

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Staff / Sr Staff DevSecOps Engineer

SciTec is a dynamic small business, with the mission to deliver advanced sensor ...

Location

United States , Boulder

Salary:

96000.00 - 141000.00 USD / Year

SciTec

Expiration Date

Until further notice

Requirements

U.S. citizenship and eligibility for a DoD security clearance
Bachelor’s degree in a STEM discipline
At least 2 year of professional experience with: Python3
CI/CD tools (GitLab CI, GitHub Actions, or Jenkins)
Git version control
Container orchestration with tools such as Docker, Kubernetes, Kustomize, or Helm
Demonstrated attention to detail
Good verbal and written communication skills

Job Responsibility

Design, maintain, and improve CI pipelines (GitLab CI) for secure software builds and deployments
Orchestrate automated deployments across development, test, and production environments using Kubernetes and Helm
Integrate CI pipelines with tools for artifact management, testing, code quality, and security scanning
Monitor and troubleshoot CI/CD pipeline performance and deployment issues
Manage software release processes including version promotion, branching, integration, and validation
Maintain and implement Helm charts for application deployments
Perform deployment validation and issue resolution in Kubernetes-based environments
Ensure adherence to cybersecurity protocols and secure coding practices
Support software vulnerability scanning (Static & Dynamic Analysis Tools) and remediation processes
Perform other DevSecOps-related duties as assigned

What we offer

4% Safe Harbor 401(k) match
100% company paid HSA Medical insurance, with a choice of 2 buy-up options
80% company paid Dental insurance
100% company paid Vision insurance
100% company paid Life insurance
100% company paid Long-term Disability insurance
100% company paid Hospital Indemnity insurance
Voluntary Accident and Critical Illness insurance
Short-term Disability insurance
Annual Profit-Sharing Plan

Fulltime

Unix - Senior Cloud - Digital Engineering Sr. Staff Engineer

Location

India , Noida

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Should have a minimum of 8 to 10 years of experience as a Linux/Unix System Administrator. Should have expertise on at least 2 flavors of Unix. Linux is a must!
Should have a deep level of understanding of Linux OS & should be able to handle day to day admin tasks.
Should be well versed shell scripting.
Expert in Unix-Linux, AWS Cloud Administration, OS/server administration, patching, maintenance, and troubleshooting.
Proficient in operating and troubleshooting AWS services like EC2, networking, RDS, backups, storage (EBS, EFS, S3, Glacier), and security (Well-Architected framework).
Possesses a strong understanding of networking concepts for configuring secure VPCs, subnets, landing zones, ACLs, and security groups.
Experience in end-to-end cloud migrations, including strategy, assessment, design, architecture, and execution on AWS.
Skilled in identifying and migrating suitable applications and workloads, gathering migration requirements, and collaborating with stakeholders.
Good knowledge of various AWS services like Lambda, SNS, SQS, DynamoDB, OpenSearch, Transfer Family, CloudWatch, EC2, EFS, EKS, Step Functions, ELB, ACM, Directory Services, and networking.
Hands-on expertise in designing, architecting, deploying, and supporting hybrid cloud environments.

Job Responsibility

Perform installation, customization and maintenance of the UNIX-LINUX Server operating system and system software products in support of business processing requirements for both On-premise and Cloud environment
Evaluate and integrate new operating system versions, drivers and hardware.
Provides in-depth diagnosis for operating systems software/hardware failures and develops solutions.
Monitors and tunes the system to achieve optimum performance levels in standalone and multi-tiered environments.
Conducts system analysis, configuration management and develops improvements for system software performance, availability and reliability.
Implements appropriate levels of system security. Maintain security patching and remediating vulnerabilities, propose solutions for the same.
Perform incident resolution, problem determination and root cause analysis in accordance with service level. Knowledge of ITIL.
Recommend and implement modifications to the server environment, Innovation, Ideas to improve
Preparation of Standard Documents and periodically review them for modifications
Identifies opportunities for process and procedure enhancements to drive efficiency and customer service levels.

Fulltime

The Staff Engineer supports the technical leadership within the Value Stream and...

Location

Salary:

Not provided

Admiral Group Plc

Expiration Date

Until further notice

Requirements

Strong hands‑on experience with Java and Spring Boot, with recent commercial use in the last few years
Knowledge and experience with Guidewire PC/BC and integrations
Knowledge and experience with Guidewire Customer Engage and Mobile App (desirable)
Experience in design and development with programming languages such as Angular, React, Gosu, and Java/J2EE
Familiarity with code repository tools (e.g., GitHub, GitLab) and code deployment tools (e.g., Jenkins, Nexus, Team City)
Experience with performance and monitoring tools (e.g., AppDynamics, ELK)
Knowledge of automated testing frameworks (e.g., Cucumber, Protractor)
Experience with application server solutions (e.g., JBOSS, Apache Tomcat)
Familiarity with cloud applications and services (e.g., Azure, GCP, AWS)
Knowledge of microservices and containerization tools (e.g., Docker, Kubernetes)

Job Responsibility

Assist in the detailed design, engineering, and quality of the technical delivery of the Value Stream
Support the creation of technical designs, solutions, and capabilities that align with the business strategy
Promote values such as productivity, quality, transparency, and openness
Facilitate open and effective communication channels to enhance knowledge transfer across the Value Stream
Ensure technical solutions follow architectural governance processes and align with technology roadmaps and engineering strategy
Drive continuous improvements to the Value Stream’s processes, resulting in increased efficiency and stability
Oversee technical debt processes and ensure solutions do not result in uncontrolled technical debt
Oversee the dependancies and vulnerabilities processes and ensure we reduce the overall vulnerabilities without adding to them, through coaching and mentoring and best in class designs and solutions
Provide leadership and mentoring to the engineering community within the area of their expertise
Collaborate and lead to help the creation of the Value Streams epics/stories in conjunction with the technical solution, collaborating across teams to ensure timely and quality delivery

What we offer

Flexible hours
Share package
Career growth and development opportunities
Financial & Mortgage Advice
24-Hour Ecare
Cycle to Work Scheme
Annual Holiday Allowance
Flexible Working
Simply Health
Private Health Cover

Fulltime

Staff Engineer, Offensive Security

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you desig...

Location

Ireland

Salary:

Not provided

Stytch

Expiration Date

Until further notice

Requirements

7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation
track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools
Expert Knowledge and solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs
post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML
Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
Ability to write functional scripts in Python or Bash to automate repetitive testing tasks
proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection
Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Job Responsibility

Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android)
Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs)
Technical Reporting: Draft high-quality reports that detail the 'path to compromise' with clear, reproducible steps for developers
Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners)
Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR
Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities
Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth
AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage

What we offer

competitive pay
generous time off
ample parental and wellness leave
healthcare
a retirement savings program

Senior Staff Engineer, Software

Our Senior Staff Software Engineer works with our Managers, Distinguished and Sr...

Location

United States , Chevy Chase; Palo Alto; Dallas; Seattle

Salary:

120000.00 - 260000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Fluency in at least one modern language (Go/Python preferred)
Understanding of compression algorithms, deduplication, encryption, and error correction
Understanding of SQL and NoSQL databases, including stateful services management and storage
Understanding of networking, caches, key/value stores, load balancing, global load balancing, queues, DNS and CDN
Deep knowledge of SRE practices, methodologies, and principles, along with a solid understanding of on prem and public cloud-based network, compute, and storage technologies
In-depth knowledge of hybrid cloud architecture, IaaS and PaaS technologies, container orchestration platforms (e.g., Kubernetes), cloud efficiency and observability etc.
Strong background in incident management
Ability to create incident response playbooks, runbooks, incident triaging strategies, and post-incident analysis to drive continuous improvement in system reliability and availability
Experience with open-source management and monitoring tools
Experience with infrastructure automation, tooling, and configuration management frameworks (e.g., Puppet, Chef, Ansible, Pulumi, Terraform, etc.)

Job Responsibility

Develop and drive the overall strategy for the Business Continuity and Disaster Recovery (BCDR) organization, aligning it with the organization's business goals and objectives
Provide thought leadership in BCDR, staying ahead of industry trends and emerging technologies to enhance our backup/restore posture
Conduct comprehensive risk assessments to identify potential threats and vulnerabilities
Design and implement robust strategies to ensure data safety, integrity and correctness
Lead the design and architecture of resilient and scalable systems, considering both on-premises and cloud-based solutions
Collaborate with cross-functional teams to integrate data safeguard best practices into the development and deployment processes
Develop and maintain comprehensive incident response plans to address various disaster scenarios on our orchestration and backup/restore systems
Conduct regular simulations and drills to ensure the readiness of the organization in the event of a disaster
Hands-on software engineering and SDLC best practices (Technical Review Documents, Architecture, Software Development, Software Reviews, Testing, Production Readiness Reviews, among others)
Evaluate, select, and implement cutting-edge technologies and tools to enhance our data safeguard capabilities including but not limited to processes, compliance, and visibility

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Select Country

Staff Engineer – Vulnerability Management Automation

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Staff Engineer – Vulnerability Management Automation

Senior Staff Security Engineer – Vulnerability Management

Staff Software Engineer, Vulnerability Management

Sr. Staff Engineer, Operations Engineer

Staff / Sr Staff DevSecOps Engineer

Unix - Senior Cloud - Digital Engineering Sr. Staff Engineer

Staff Engineer

Staff Engineer, Offensive Security

Senior Staff Engineer, Software

Our AI answers in your language