Senior Engineer Product Security

Why Join GEICO

At GEICO we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers expectations while making a real impact on local communities nationwide.

Founded in 1936 GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company we want you to feel valued supported and proud to work here. Thats why we offer the GEICO Pledge: Great Company Great Culture Great Rewards and Great Careers.

GEICO is seeking a Senior Security Engineer to strengthen the security of AI-enabled products and the engineering platforms that support them. This role combines product security judgment with hands-on software development.

The engineer will assess designs review code build security automation and partner with engineering and product teams to translate business needs and security requirements into practical production-ready solutions.

The successful candidate operates effectively with high-level direction clarifies ambiguous problems prioritizes competing work and owns deliverables through completion. This is a Senior Engineer role focused on vital team-level contributions and technical leadership within the team rather than enterprise-wide architecture ownership.

What You Will Do

• Provide technical leadership within the team for AI security product security secure design and security engineering work.

• Plan estimate prioritize and deliver engineering work to schedule while managing multiple concurrent priorities and context switches.

• Design build test deploy and troubleshoot production-ready security services integrations automation and developer tooling.

• Perform threat modeling and security architecture reviews for AI-enabled applications services APIs data flows agentic workflows and supporting platforms.

• Review code and designs for authentication authorization role-based access control input validation data protection logging error handling database access and other security concerns.

• Translate business needs customer feedback and security requirements into clear technical requirements implementation plans and measurable outcomes.

• Use data and risk context to recommend priorities and make sound design or configuration decisions with attention to security compliance privacy reliability and customer data handling.

• Work across engineering product platform risk and cybersecurity teams to remove blockers resolve issues and drive agreed actions to completion.

• Proactively identify process tooling and control gaps then implement practical improvements that reduce manual effort and strengthen security outcomes.

• Contribute significantly to design code security observability performance and operational-readiness reviews using established architecture and engineering guidance.

• Document technical decisions operating procedures support guidance and lessons learned so solutions can be maintained and improved by the team.

• Help teammates overcome technical obstacles and share knowledge through reviews pairing technical discussions and clear documentation.

AI and Product Security Focus

• Assess security risks associated with AI models agents prompts retrieval-augmented generation model context protocols tools data sources memory and downstream actions.

• Apply secure-by-design practices to AI-enabled systems including least privilege trustworthy identity authorization boundaries input and output controls secrets protection audit logging data governance and resilient failure handling.

• Build or integrate automated safeguards evaluation workflows security tests and monitoring that help teams identify and reduce AI and application security risk throughout the development lifecycle.

• Partner with developers to provide actionable remediation guidance and validate that security issues are addressed effectively.

Required Qualifications

• Solid professional experience in software engineering security engineering product security application security or a related technical field.

• Hands-on experience writing reviewing testing and troubleshooting code with strong proficiency in Python or a comparable modern programming language.

• Experience with full-stack or platform development using tools and technologies such as GitHub Git terminal and CLI workflows APIs relational databases such as PostgreSQL and automated testing.

• Practical experience conducting threat modeling secure design reviews architecture reviews or secure code reviews.

• Working knowledge of common application and API security risks secure authentication and authorization patterns input validation logging error handling database security and secure SDLC practices.

• Ability to organize complex work create realistic project plans manage dependencies communicate status and risks and drive work to completion.

• Ability to make progress with incomplete information ask effective clarifying questions and apply sound engineering judgment under ambiguity.

• Strong written and verbal communication skills for technical and non-technical audiences.

• Ability to listen to different perspectives incorporate feedback and confidently explain a well-reasoned recommendation.

• Experience integrating AI-assisted development practices into the software development lifecycle while retaining accountability for architecture technical decisions testing security and operational readiness.

• Proven ability to validate AI-generated outputs identify inaccurate or insecure recommendations and ensure resulting code meets expectations for security quality maintainability reliability testability and compliance.

• Strong portfolio of hands-on engineering work demonstrating effective use of AI-enabled development capabilities including code generation code review debugging refactoring test generation documentation and engineering automation.

• Demonstrated track record of leveraging AI-assisted software development tools and workflows to design develop test troubleshoot and deliver production-quality software solutions.

• Experience working in an Agentic Development Environment where AI assistants or coding agents can inspect project context propose or modify code generate tests summarize repositories create pull requests and support iterative debugging while the engineer remains accountable for correctness security and maintainability.

• Hands-on familiarity with modern AI-enabled developer tools and workflows such as Cursor Claude Code GitHub Copilot GitHub pull request automation AI-assisted code review repository-aware chat terminal-based coding agents and secure prompt/context management for engineering tasks.

Preferred Qualifications

• Experience building or securing generative AI agentic AI RAG MCP-based integrations or AI-enabled developer workflows.

• Experience with Python application frameworks data validation libraries such as Pydantic PostgreSQL cloud services containers CI/CD and infrastructure automation.

• Experience integrating security testing and controls into engineering workflows and developer tooling.

• Familiarity with product security cloud security API security threat modeling methodologies and security or compliance frameworks relevant to enterprise environments.

• Experience balancing near-term delivery with maintainability operational readiness and longer-term improvement opportunities.

• Experience designing guardrails evaluation frameworks security controls and governance mechanisms for AI-generated code and AI-assisted engineering workflows.

• Experience building extending or securing AI-assisted development platforms coding assistants developer agents agentic workflows MCP integrations RAG systems or AI-enabled engineering productivity solutions.

How You Work

• Highly organized and detail-oriented with the ability to manage multiple priorities simultaneously.

• Takes ownership of problems and follows through until outcomes are delivered.

• Thrives in a fast-paced environment and switches context with minimal loss of momentum.

• Acts on ambiguity instead of waiting for perfect information.

• Curious driven and eager to learn unfamiliar technologies and business domains.

• Proactive in identifying improvement opportunities and turning ideas into implemented solutions.

• Direct respectful and audience-aware in communication.

• Open to differing perspectives while confident in evidence-based technical judgment.

What Success Looks Like

• Security risks are identified early and translated into clear actionable engineering decisions.

• Committed work is planned prioritized communicated and delivered with high quality.

• AI security safeguards and security automation are reliable testable maintainable and usable by partner teams.

• Engineering teams receive practical guidance that helps them resolve issues and build more secure products.

• The team benefits from new and improved tools documentation repeatable practices and shared technical knowledge.

Annual Salary

The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include but are not limited to the scope and responsibilities of the role the selected candidates work experience education and training the work location as well as market and business considerations.

The GEICO Pledge:

Great Company:Protecting customers through lifes twists and turns with innovation and integrity.

Great Careers:Personalized development programs mentorship and certification assistance.

Great Culture:Inclusive and collaborative culture rooted in shared success.

Great Rewards:Competitive pay benefits and flexibility to support your well-being and future.

The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race color religious creed national origin ancestry age gender pregnancy sexual orientation gender identity marital status familial status disability or genetic information in compliance with applicable federal state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.

GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.