5 months ago
Base Salary
$94k - $158k/yr
Responsibilities
- Design, operate, and continuously improve application security testing capabilities and pipelines.
- Assess application risks and recommend mitigations.
- Perform application-layer security reviews of code across multiple languages and frameworks.
- Assist with application-layer penetration testing to identify potential issues.
- Provide application security guidance and mentorship to development teams.
- Collaborate with application development, DevSecOps, and information security teams to design security into applications and support vulnerability remediation.
Requirements
- At least 5 years of application security experience, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false-positive analysis.
- Experience assessing risk using a consistent risk management framework and interpreting application penetration testing, code scanning, and open-source scanner findings.
- Ability to develop automations or applications using Python, TypeScript, Java, or PowerShell.
- Experience creating and maintaining reusable GitHub Actions workflows and managing GitHub workflows.
- Hands-on DevSecOps experience with Kubernetes and strong knowledge of Kubernetes security best practices.
- Ability to analyze code for security and design vulnerabilities and understanding of HTTP, OAuth, OIDC, REST, communication protocols, encoding, encryption, and algorithms.
- Experience with AWS and Azure cloud platforms.
- Bachelor’s degree in computer science or a related field.
- US citizenship and willingness and ability to maintain a US Security Clearance.
- Preferred proficiency with C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java.
- Preferred familiarity with AI-assisted coding tools such as GitHub Copilot and the security risks of AI-generated code.
Benefits
- Medical, dental, vision, basic and supplemental life insurance, 401(k), profit-sharing, at least 80 hours of vacation leave, and twelve paid holidays.
- Opportunities for personal and professional growth.
- Onsite role.
- US citizenship and ability to maintain a US Security Clearance are required.
Tech Stack
Categories
About Esri
Esri develops the ArcGIS geographic information system platform for mapping, spatial analytics, and location intelligence used by governments, utilities, transportation, natural resources, and commercial enterprises. The privately held company, founded in 1969 and headquartered in Redlands, California, monetizes through software licenses and subscriptions, cloud services, data, training, and consulting. Its tools power web and mobile mapping, geospatial APIs, and enterprise systems for planning, operations, and emergency management worldwide.