The Staff Engineer– Cloud security Engineer positionreports to the Senior Manager of Cyber Engineering and works closely with infrastructure, development, product, and other organizations across GEICO to integrate security into the ecosystem from design through deployment to sustainable operations. The Staff Engineer is a subject matter expert in defining cloud security requirements, defining secure infrastructure architectures, performing infrastructure and service security assessments, and providing security patterns.

Position Responsibilities

As a Cloud SecurityEngineer, you will:

• Develop, integrate, and maintain multilevel cybersecurity designs, architectures, policies,standards and procedures

• Provide technical solutions, integration decisions, analyzing design constraints and trade-offs in system and security design, and ensuring integrity of GEICO mission objectives, while following Secure by Design principles.

• Serve as a technical advisor and consultant to GEICO Cybersecurity organization on the implementation of Cybersecurity policies and standards.

• Provide secure design guidance and recommendations to developers, infrastructure, cybersecurity, and other engineers.

• Lead security projects driven by groups both internal and external to cybersecurity.

• Act as subject matter expert across several areas of network & information security, data Security, Identity Security.

• Developed Security Policy using Policy as a code and enforcement policy in SDLC process to enable shift-left DevSecOpspractice.

Qualifications:

• Experience as Application, Platform or Security Architecture 

• Experience in performing Data Risk Assessment, Third Party Assessment, App Sec Review, Cyber Secure Engineering Review and Threat modeling.

• Programming experience with at least one modern language such as GO, Java, or C# including object-oriented design.

• Experience with at least one of scripting language Python, Terraform or Ansible

• Advanced understanding of DevOps Concepts and Cloud Architecture

• Knowledge of Kubernetes, Advanced understanding of security protocols and products

• Proficient level experience in designing, developing, and managing infrastructure automation solutions in one of the Cloud providers Azure, AWS or GCP

• Strong problem-solving abilities with a proactive approach to security risk mitigation

• Experience in at least two of the following disciplines: Security solution design, Security infrastructure architecture, Network security management, Cloud security Development

• Excellent understanding and knowledge of secure software development life cycle methodologies such as secure design, threat modeling, agile software development, rapid prototyping, andDevSecOps practice

• Commands a well-developed understanding of strategic, emerging security/cloud technology trends

• Experience with one of core Security Framework – NIST, PCI, ISO

Certification Preferred:

• CISSP

• CCSP

• any Cloud security Certification

Education:

• Bachelor’s degree in computer science, Information Systems, or equivalent education or work experience