3 months ago
Base Salary
$94k - $158k/yr
Responsibilities
- Design, operate, and continuously improve application security testing capabilities and pipelines.
- Assess application risks and recommend mitigations.
- Perform application-layer security reviews of code across multiple languages and frameworks.
- Assist with application-layer penetration testing to identify potential issues.
- Provide application security guidance and mentorship to development teams.
- Collaborate with application development, DevSecOps, and information security teams to design security into applications and support vulnerability remediation.
Requirements
- At least 5 years of application security experience, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false-positive analysis.
- Experience assessing risk using a consistent risk management framework and interpreting application penetration testing, code scanning, and open-source scanner findings.
- Ability to develop automations or applications using Python, TypeScript, Java, or PowerShell.
- Experience creating and maintaining reusable GitHub Actions workflows and managing GitHub workflows.
- Hands-on DevSecOps experience with Kubernetes and strong knowledge of Kubernetes security best practices.
- Ability to analyze code for security and design vulnerabilities and understanding of HTTP, OAuth, OIDC, REST, communication protocols, encoding, encryption, and algorithms.
- Experience with AWS and Azure cloud platforms.
- Bachelor’s degree in computer science or a related field.
- US citizenship and willingness and ability to maintain a US Security Clearance.
- Preferred proficiency with C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java.
- Preferred familiarity with AI-assisted coding tools such as GitHub Copilot and the security risks of AI-generated code.
Benefits
- Medical, dental, vision, basic and supplemental life insurance, 401(k), profit-sharing, at least 80 hours of vacation leave, and twelve paid holidays.
- Opportunities for personal and professional growth.
- Onsite role.
- US citizenship and ability to maintain a US Security Clearance are required.
Tech Stack
Categories
About Esri
Esri is the global market leader in geographic information system (GIS) software, location intelligence, and mapping. Since 1969, we have supported customers with geographic science and geospatial analytics, what we call The Science of Where. We take a geographic approach to problem-solving, brought to life by modern GIS technology.