2 days ago
Redlands, CA, USAMid Level
Base Salary
$92k - $149k/yr
Responsibilities
- Implement and advance the Incident Response Lifecycle using the FIRST PSIRT Framework.
- Validate, research, and translate security and privacy findings into concise issues.
- Communicate outcomes of vulnerability investigations and present software security and privacy risk metrics.
- Facilitate red-teaming exercises to evaluate application security.
- Identify common patterns of vulnerability and privacy risk exposure.
- Write and maintain SOPs, processes, best practices, and procedural documents.
- Collaborate with development teams on security best-practice technical papers, security advisories, and blogs.
- Track, lead, and prioritize numerous parallel projects and tasks.
Requirements
- At least 2 years of experience with CSIRT, CIRT, or PSIRT functions in an enterprise-scale environment.
- Solid understanding of FIRST, OWASP Top 10, SANS Top 25, CVE, and other security frameworks.
- Experience with Burp Suite or similar automated security testing tools.
- Deep knowledge of Windows, Linux, cloud computing, and networking concepts.
- Deep understanding of common security weaknesses and attack and defense methodologies.
- Strong written and verbal communication skills and attention to detail.
- Bachelor’s degree in computer science, engineering, information systems, data science, or a related field.
- Preferred: master’s degree in a related field; red/blue/purple team penetration-testing experience; extensive ArcGIS experience; AI security testing; FedRAMP or ISO security-control experience; coordinated vulnerability disclosure familiarity; and Python, Perl, Ruby, shell, Java, C++, or .NET experience.
Benefits
- Medical, dental, vision, and basic and supplemental life insurance for employees and families.
- 401(k) and profit-sharing programs.
- At least 80 hours of vacation leave and twelve paid holidays annually.
- Opportunities for personal and professional growth.
- Onsite position.
- Visa sponsorship is not available for this posting.
About Esri
Esri develops the ArcGIS geographic information system platform for mapping, spatial analytics, and location intelligence used by governments, utilities, transportation, natural resources, and commercial enterprises. The privately held company, founded in 1969 and headquartered in Redlands, California, monetizes through software licenses and subscriptions, cloud services, data, training, and consulting. Its tools power web and mobile mapping, geospatial APIs, and enterprise systems for planning, operations, and emergency management worldwide.