21 hours ago
Base Salary
$94k - $158k/yr
Responsibilities
- Design, operate, and continuously improve application security testing capabilities and pipelines.
- Assess application risks and recommend mitigations using consistent risk management practices.
- Perform application-layer security reviews of code across multiple languages and frameworks.
- Assist with application-layer penetration testing and analysis of security findings.
- Provide application security guidance and mentorship to development teams.
- Incorporate security and data privacy safeguards into work activities and deliverables.
Requirements
- At least 5 years of application security experience, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false-positive analysis.
- Experience determining risk from security findings using a consistent risk management framework.
- Ability to develop automations or applications using Python, TypeScript, Java, or PowerShell.
- Experience creating and maintaining reusable GitHub Actions workflows and managing GitHub workflows.
- Hands-on experience in a Kubernetes-based DevSecOps environment and strong knowledge of Kubernetes security best practices.
- Ability to read and analyze code for security and design vulnerabilities.
- Understanding of HTTP, OAuth, OIDC, REST, and other common web application security standards.
- Experience with AWS and Azure.
- US citizenship and willingness and ability to maintain a US Security Clearance.
- Bachelor’s degree in computer science or a related field.
- Preferred: proficiency in C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java.
- Preferred: familiarity with AI-assisted coding practices, GitHub Copilot, application security implications of AI-generated code, security scanners, communication protocols, encoding, encryption schemes, and algorithms.
Benefits
- Medical, dental, vision, basic and supplemental life insurance, 401(k), and profit-sharing programs.
- At least 80 hours of vacation leave and twelve paid holidays annually.
- Opportunities for personal and professional growth.
- Remote work indicated by the posting’s #LI-remote tag.
Tech Stack
Categories
About Esri
Esri develops the ArcGIS geographic information system platform for mapping, spatial analytics, and location intelligence used by governments, utilities, transportation, natural resources, and commercial enterprises. The privately held company, founded in 1969 and headquartered in Redlands, California, monetizes through software licenses and subscriptions, cloud services, data, training, and consulting. Its tools power web and mobile mapping, geospatial APIs, and enterprise systems for planning, operations, and emergency management worldwide.