Senior Staff Operations Engineer - Cybersecurity

GEICO•Bethesda, MD

1d•$120,000 - $260,000

About The Position

GEICO is seeking an experienced Sr. Staff Engineer, Operations Engineer with a passion for managing complex programs across multiple departments and teams to build a Platform Security operational excellence environment from the ground up. You will help drive our business transformation as we transition from a traditional IT model to a tech organization with engineering excellence as its mission. The Sr. Staff Engineer, Operations is a key member of the team working across the Platform Security organization to ensure successful delivery of effective security controls, prioritization of initiatives and issue management. In this role you will own a portfolio of initiatives such as compliance, engineering and operational excellence and vendor engagement. This is beyond technical project management and requires a background in building teams, delivering solutions and proving that with KPIs and visible metrics. The ideal candidate will have excellent communication skills, real-world examples in engaging the right technical partners and leadership to drive towards a solution and get people working together.

Requirements

Infrastructure technologies knowledge in a hybrid cloud environment including Containerization, VMs, CI/CD pipeline, IaC,
Extensive experience in engineering and solution delivery in a dynamic service provider environment.
Strong program and project management skills with proven experience coordinating projects across multiple teams, with successful project/product delivery at scale
Working knowledge of security services and their impact on production systems including runtime protection services, detective and protective agents and/or daemon sets, vulnerability and application scanning, etc..
Experience in a multi-platform environment with Linux, Mac, Windows.
Experience communicating and presenting to senior and junior staff with the ability to influence stakeholders.
Detail and deadline oriented with effective organizational and analytic skills
Strong critical thinking, problem solving, decision making, and analytical skills
Outstanding time management skills and attention to detail
Excellent verbal/written communication skills, including the ability to clearly document findings, proposals, issues, and status
Experience with continuous delivery
Self-motivated and able to work independently while coordinating activities with cross-divisional teams
Effective leadership qualities, ability to influence without direct management authority
Ability to excel in a fast-paced, startup-like environment.
Knowledge of industry-standard security control frameworks including PCI, SOX, NYDFS.
8+ years in an engineering focused role, preferably in the tech industry
4+ years of experience with AWS, GCP, Azure, or other cloud providers
4+ years in a senior role influencing company direction
Experience applying engineering to meet or exceed third party attestation requirements (PCI, SOX, …).
Bachelor’s degree in Computer Science, Cyber Security, or equivalent education with work experience
Third party certifications on engineering related technologies.

Responsibilities

Monitor and track signals of security gaps, initiative delays, compliance risks due to system issues, and drive resolution.
Create visuals on current state of the union related to security engineering.
Help to develop standards on reporting tool effectiveness, maturity, resilience and other factors in determining risks as they come up.
Help drive efficiencies in technology evaluations, requirements gathering and procurement or creation.
Provide expert guidance, demonstrations and lead discussions on security best practices to stakeholders and leadership.
Works in lockstep with our CSIRT, GRC, Tech and partner teams to ensure protection coverages, proper detection event notifications, documentation and standards we can all use.
Organize, store and manage operational best practices documentation for security solutions to protect our platforms including endpoint, cloud, collaboration, identity and network.
Partner with the project sponsors, delivery teams, and stakeholders to deliver quality solutions on time and within budget by coordinating project activities across multiple systems, departments, and teams.
Create, maintain, and actively manage a detailed project schedule, change control process, and documentation.
Identify and raise appropriate security risks, in addition to presenting detailed and implementable solutions or alternatives.