Senior Cyber Threat Intelligence Engineer (HYRBID)

GEICO•Austin, MD

2d•$105,000 - $215,000•Hybrid

About The Position

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers’ expectations while making a real impact for our company through our shared purpose. When you join our company, we want you to feel valued, supported and proud to work here. That’s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers. As a Senior Cyber Threat Intelligence Engineer , you will function as a deeply technical individual contributor responsible for advancing intelligence-driven threat detection and proactive threat hunting across GEICO’s environment. This role requires extensive hands-on experience, strong analytic judgment, and the ability to independently execute complex work that directly contributes to reducing cyber risk. You will be expected to operate with a high degree of autonomy, applying your technical expertise to identify adversary behavior, develop actionable insights, and drive meaningful outcomes without requiring close supervision. This is a hybrid position and requires regular in-office presence at a GEICO location. Fully remote candidates will not be considered for this role. This position is designed for professionals who can independently own work from initial problem identification through execution and delivery. You will be expected to define intelligence and hunting objectives, assess ambiguous and evolving threat scenarios, and apply expert-level technical judgment to determine appropriate courses of action. Your work will directly influence detection strategies and response efforts through the intelligence you produce, the tools and automation you develop, and the analytic conclusions you draw from complex data sets. In addition to hands-on technical execution, this role carries an expectation of technical leadership. Senior Cyber Threat Intelligence Engineers are trusted contributors whose outputs are relied upon by stakeholders across security teams. You will be expected to set a high bar for analytic quality, provide thoughtful peer review, and mentor junior analysts through direct collaboration, technical guidance, and example.

Requirements

7+ years of experience in cyber threat intelligence, threat hunting, security operations, or a related cybersecurity discipline
Demonstrated hands-on experience conducting threat hunting in enterprise environments
Strong coding or scripting experience with the ability to design and maintain custom tools
Proven experience applying adversary frameworks such as MITRE ATT&CK to real-world detection and analysis
Experience producing written intelligence products that inform technical teams and leadership
Deep understanding of attacker techniques, intrusion workflows, malware, and phishing operations
Experience working with SIEM, EDR, and threat intelligence platforms
Ability to work independently, manage competing priorities, and deliver results under time constraints

Nice To Haves

Experience supporting incident response or digital forensics activities
Familiarity with cloud platforms and cloud-based threat activity
Experience building internal CTI tooling, pipelines, or automation
Experience working in large enterprise or regulated environments

Responsibilities

Analyze and assess advanced cyber threats, adversary behavior, tooling, and campaigns relevant to GEICO
Develop and execute intelligence-informed threat-hunting hypotheses using endpoint, network, and cloud telemetry
Build, maintain, and enhance custom tools, scripts, and automation to support intelligence analysis and hunting workflows
Use programming and scripting languages (e.g., Python, PowerShell, Bash, or similar) to analyze data, enrich intelligence, and automate manual processes
Translate threat intelligence into actionable detection logic, investigative guidance, and response context
Produce clear, well-structured written intelligence products, including assessments, briefings, and reports for both technical and non-technical audiences
Support active investigations by providing timely adversary context during incidents
Track emerging threats, vulnerabilities, and adversary trends, prioritizing relevance and impact
Continuously improve analytic tradecraft, tooling, and processes to increase effectiveness and efficiency

Benefits

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume