Vulnerability Management Engineer

GEICO is seeking an enthusiastic and experienced engineer to provide support for vulnerability management. This individual will play a pivotal role in advancing our vulnerability management program, ensuring the security of our information systems and networks.

The Vulnerability Management Engineer will lead and support the program, build metrics to drive and prioritize remediations, provide mentorship and coaching for teammates, and proactively manage vulnerabilities within an established timeframe for our hybrid environment.

Position Description :

Our Vulnerability Management Engineer provides the necessary technical skills, analysis and design tasks related to support the management of a secure environment that meets business solution needs and aligns with the organization’s architectural governance and standards.

The ideal candidate assists with creation of deliverables for managing the organization’s vulnerabilities as they are identified and remediated across systems.

Position Responsibilities

As a Vulnerability Management Engineer, you will :

Support development of a comprehensive vulnerability management program that aligns with our enterprise’s objectives and risk appetite.

Collaborate closely with cross-functional teams, including IT, Security, Compliance, and Business stakeholders to identify and prioritize vulnerabilities, and develop effective remediation plans.

Establish and maintain strong relationships with key stakeholders across the organization, ensuring that vulnerability management priorities are well understood and integrated into business processes.

Drive continuous improvements in vulnerability management processes and tools by leveraging industry-leading technologies, automation, and data-driven insights.

Stay current on industry trends, emerging threats and best practices in vulnerability management and adapt the program accordingly.

Evaluate and recommend vulnerability management tools and technologies, ensuring the optimal balance of effectiveness and efficiency.

Aid in the continuous management of third-party software to ensure vulnerabilities are identified and addressed within an appropriate timeframe.

Develop and deliver regular metrics, reports, KPIs and presentations to executive leadership and key stakeholders, communicating the status and effectiveness of the vulnerability management program.

Vulnerability contextualization to ensure proper risk is assigned to vulnerable assets.

Support a diverse vulnerability management program that covers secure software development lifecycle, patch governance, and application security.

Qualifications and Experience :

Exhibited experience in information security with a focus on vulnerability management.

Proven experience supporting a successful comprehensive vulnerability management program.

Excellent communication and collaboration skills, with the ability to effectively communicate complex security topics to a diverse audience.

Strong knowledge of cybersecurity principles and best practices accompanied by experience in managing security risks.

Experience building and maintaining vulnerability metrics that can be easily understood and leveraged to reduce risk.

Demonstrated ability to lead and manage projects in a fast-paced dynamic environment to achieve high performance.

Education :

Bachelors or master’s degree in Computer Science, Information Security, or equivalent education or work experience.

At this time, GEICO will not sponsor a new applicant for employment authorization for this position.

Benefits :

As an Associate, you’ll enjoy our

• to help secure your financial future and preserve your health and well-being, including :
• Premier Medical, Dental and Vision Insurance with no waiting period
• Paid Vacation, Sick and Parental Leave
• 401(k) Plan
• Tuition Reimbursement
• Paid Training and Licensures
• Benefits may be different by location. Benefit eligibility requirements vary and may include length of service.

Coverage begins on the date of hire. Must enroll in New Hire Benefits within 30 days of the date of hire for coverage to take effect.