1 day ago
Base Salary
$94k - $158k/yr
Responsibilities
- Design, operate, and continuously improve application security testing capabilities and pipelines.
- Assess application risks and recommend mitigations using a consistent risk management framework.
- Perform application-layer security reviews of code across multiple languages and frameworks.
- Assist with application-layer penetration testing to identify potential issues.
- Provide application security guidance and mentorship to development teams.
- Develop security automations and applications using supported programming languages.
- Create and maintain reusable GitHub Actions workflows and manage GitHub workflows.
- Incorporate security and data privacy safeguards into work activities and deliverables.
Requirements
- At least 5 years of application security experience, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false-positive analysis.
- Experience determining risk from code review, penetration testing, and open-source security findings.
- Ability to develop automations or applications using Python, TypeScript, Java, or PowerShell.
- Experience creating and maintaining reusable GitHub Actions workflows.
- Hands-on experience in a Kubernetes-based DevSecOps environment and knowledge of Kubernetes security best practices.
- Ability to read and analyze code for security and design vulnerabilities.
- Understanding of HTTP, OAuth, OIDC, REST, and common web application security standards.
- Experience with AWS and Azure.
- US citizenship and willingness and ability to maintain a US Security Clearance.
- Bachelor’s degree in computer science or a related field.
- Preferred experience with C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java.
- Preferred familiarity with AI-assisted coding, GitHub Copilot, application penetration-testing findings, code scanning, open-source scanners, communication protocols, encoding, encryption, and algorithms.
Benefits
- Medical, dental, vision, basic and supplemental life insurance for employees and their families.
- 401(k) and profit-sharing programs.
- Minimum accrual of 80 hours of vacation leave and twelve paid holidays per calendar year.
- Opportunities for personal and professional growth.
- The position is listed as onsite.
- Base salary range of $93,600—$157,560 USD.
Tech Stack
Categories
About Esri
Esri develops the ArcGIS geographic information system platform for mapping, spatial analytics, and location intelligence used by governments, utilities, transportation, natural resources, and commercial enterprises. The privately held company, founded in 1969 and headquartered in Redlands, California, monetizes through software licenses and subscriptions, cloud services, data, training, and consulting. Its tools power web and mobile mapping, geospatial APIs, and enterprise systems for planning, operations, and emergency management worldwide.