{"id":1145394,"url":"https://alion.io/job/geico-sr-staff-security-engineer-ai-vmr-offensive-security","title":"Sr. Staff Security Engineer – AI, VMR, Offensive Security","company":{"id":2667051,"name":"GEICO","domain":"geico.com","url":"https://alion.io/company/geico-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":36,"ghost_share":0,"stale_share":0.778,"repost_share":0.028,"time_to_fill_p50_days":27,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States","Dallas, United States","Seattle, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":260000,"currency":"USD","period":"year","gross":null,"usd_annual":260000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Java","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-09-17T00:00:00Z","employer_posted_date":"2026-09-17","last_verified_at":"2026-10-25T19:04:42Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"Why Join GEICO?\nAt GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.\nEvery day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.\nFounded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge: Great Company, Great Culture, Great Rewards, and Great Careers.\nGEICO is seeking a highly experienced Senior Staff Security Engineer to lead the strategy and technical execution of Vulnerability Management and Offensive Security across a complex, hybrid technology ecosystem. This role blends deep security engineering expertise with strong architectural leadership, hands-on experience, leveraging frontier AI models for security, drive customer success, and provide advisory to senior executive leaders.\nThis is a high-impact hands-on technical role who maintains a strong connection with both customers and underlying systems for shaping the company’s vulnerability management maturity, influencing engineering culture, and safeguarding critical systems. The Senior Staff Security Engineer will drive meaningful, measurable improvements to security posture while enabling teams to build and ship technology with confidence. They drive customer success for the vulnerability management and offensive security functions. They demonstrate a keen ability to dive deep into complex problems to fully understand how systems operate, discerning when to make incremental improvements and when to challenge the status quo to drive impactful results. They are well-versed with Vulnerability Management Lifecycle - asset discovery, internal/external scans, contextualization and risk-based assessment, triaging of CVEs, detection authoring, security data pipeline, reporting, and remediation.\nThis role is an advisor to executive leaders and iscritical to our cybersecurity objectives. The position requires a strong security and engineering background with hands-on experience. The successful candidate will play a key role in maintaining a strong security posture for the company through close collaboration with infrastructure, development, product, and other organizations across GEICO to integrate security into the ecosystem from design through deployment to sustainable operations.\nAt GEICO’s Cybersecurity organization, we are committed to strengthening the company’s digital resilience and advancing the security of our technology ecosystem. Our mission is to proactively protect our customers, associates, and business by modernizing our security capabilities, elevating our defensive posture, and enabling secure innovation at scale. As GEICO transforms its technology landscape, Cybersecurity plays a pivotal role in delivering secure, reliable, and future-ready solutions that support every line of business and every customer channel-empowering the enterprise with protection that is adaptable, intelligent, and built for the evolving threat landscape.\nWhat do you bring in?\nThis role is designed for a highly technical, hands-on security engineer who thrives at the intersection of vulnerability management, offensive security, and emerging AI-driven threats and defenses. You bring deep domain expertise across penetration testing, red and purple teaming, and modern security engineering, coupled with the ability to leverage AI to scale both offensive insights and defensive capabilities. You are customer-obsessed in your approach to security, operating with a strong sense of ownership and urgency in a fast-paced environment. You excel at translating complex technical risks and security concepts into clear, business-aligned outcomes that resonate with senior executives and drive action. A self-starter by nature, you navigate ambiguity with confidence, independently overcome challenges, and consistently deliver measurable results. You are equally comfortable advising executive leadership as you are designing and building secure systems, bringing a rare blend of strategic influence and deep engineering execution to elevate the organization’s security posture.\nKey Responsibilities\nVM & OffSec Execution\nLead the strategy and technical execution of Vulnerability Management, Offensive Security, and AI-augmented security at scale.\n\nLead the full vulnerability lifecycle: discovery, validation, risk analysis, prioritization, and remediation measurement.\n\nLeverage business contextualization, underlying systems, threat intelligence, and AI frontier models to perform risk assessment for identifying true risk to drive remediation.\n\nIntegrations among scanning tools, asset inventory, CMDBs, ticketing, CI/CD, and monitoring pipelines to streamline workflows.\n\nEvaluate, test, and implement emerging AI technologies that advance automated discovery and remediation.\n\nDesign automation to reduce manual work, increase accuracy, and accelerate remediation.\n\nGenerate data-driven insights that help teams understand, prioritize, and resolve vulnerabilities efficiently.\n\nCross-Functional Partnership\nDrive customer success for the vulnerability management and offensive security functions.\n\nPlay role of an advisor to senior executive leadership.\n\nCollaborate with cloud, infrastructure, DevOps, and product engineering groups to integrate vulnerability management into pipelines and delivery workflows.\n\nWork closely with risk, compliance, governance, and incident response teams to ensure alignment with organizational and regulatory standards.\n\nCommunicate vulnerability trends, risk implications, and remediation strategies to technical and non-technical stakeholders.\n\nOperational Excellence & Measurement\nDefine KPIs, SLAs, dashboards, and reporting models to drive accountability and measurable vulnerability reduction.\n\nEstablish repeatable processes, playbooks, and workflows that ensure consistent VM operations across teams and environments.\n\nEnsure the reliability, performance, and scalability of VM tools and data pipelines.\n\nLeadership, Mentoring & Team Development\nMentor junior and mid-level engineers, offering guidance on advanced security concepts, engineering best practices, and career development.\n\nServe as a multiplier by elevating skillsets across teams through coaching, pairing, design reviews, and knowledge-sharing.\n\nInfluence architecture and engineering leadership with clear communication, strong decision-making, and the ability to simplify complex security issues.\n\nRequired Qualifications\n10+ years of experience in cybersecurity or security engineering roles.\n\nDeep expertise with vulnerability management tools, methodologies, and industry standards.\n\nHands-on experience with modern infrastructure, cloud services (AWS/Azure/GCP), container platforms, and operating systems.\n\nProficiency with a modern programming language (Python, Go, Java, etc.) and scripting for automation at scale.\n\nStrong understanding of security architecture, networking, operating systems, identity, and cloud services.\n\nProven ability to lead, mentor, and inspire engineers across multiple teams.\n\nStrong communication skills with the ability to influence senior stakeholders and translate complex risks into actionable guidance.\n\nHands-on experience implementing cybersecurity frameworks e.g. NIST CSF\n\nHands-on experience with leading compliance initiatives to meet e.g. PCI, SOX, NYDFS, etc.\n\nPreferred Qualifications\nExposure to comprehensive security assessment, penetration testing, threat modeling, or security research.\n\nFamiliarity with SIEM, SOAR, and asset intelligence integrations.\n\nSecurity certifications (CISSP, GCSA, OSCP, cloud security certs) are a plus.\n\nExperience embedding security controls into CI/CD pipelines and DevSecOps workflows.\n\nEducation:\nBachelor’s degree in computer science, Cyber Security, or equivalent education with relevant work experience\n\nAnnual Salary\n$120,000.00 - $260,000.00The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.\nAt this time, GEICO will not sponsor a new applicant for employment authorization for this position.The GEICO Pledge:\nGreat Company: Protecting customers through life’s twists and turns with innovation and integrity.\nGreat Careers: Personalized development programs, mentorship, and certification assistance.\nGreat Culture: Inclusive and collaborative culture rooted in shared success.\nGreat Rewards: Competitive pay, benefits, and flexibility to support your well-being and future.\nThe equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.\nGEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.","description_format":"text","description_chars":10288,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Penetration Testing","Property & Casualty Insurance","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-23T14:46:33Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":0.9,"p_active":0.539,"p_room":0.55,"age_days":38,"expected_fill_days":27,"reasons":["conf:67","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":260000,"is_top_pay":true},"html_url":"https://alion.io/job/geico-sr-staff-security-engineer-ai-vmr-offensive-security","json_url":"https://alion.io/job/geico-sr-staff-security-engineer-ai-vmr-offensive-security.json","meta":{"generated_at":"2026-10-26T03:31:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4750,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2667051},"rest":"https://alion.io/mcp/rest/get_company?id=2667051"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeico-sr-staff-security-engineer-ai-vmr-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeico-sr-staff-security-engineer-ai-vmr-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeico-sr-staff-security-engineer-ai-vmr-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/geico-sr-staff-security-engineer-ai-vmr-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeico-sr-staff-security-engineer-ai-vmr-offensive-security"}]}