21 hours ago
Remote, United StatesMid Level
Base Salary
$92k - $149k/yr
Responsibilities
- Implement and advance the Incident Response Lifecycle using the FIRST PSIRT Framework.
- Validate, research, and translate security and privacy findings into concise issues.
- Communicate vulnerability investigation outcomes and software security and privacy risk metrics.
- Facilitate red-teaming exercises to evaluate application security.
- Identify recurring vulnerability and privacy risk exposure patterns.
- Write and maintain SOPs, processes, best practices, and procedural documents.
- Collaborate with development teams and contribute to technical papers, security advisories, and blogs.
Requirements
- At least 2 years of experience with CSIRT, CIRT, or PSIRT functions in an enterprise-scale environment.
- Knowledge of FIRST, OWASP Top 10, SANS Top 25, CVE, and related security frameworks.
- Experience with Burp Suite or similar automated security testing tools.
- Deep knowledge of Windows, Linux, cloud computing, networking concepts, security weaknesses, and attack and defense methodologies.
- Bachelor’s degree in computer science, engineering, information systems, data science, or a related field.
- Strong written and verbal communication skills, attention to detail, and ability to manage multiple parallel tasks.
- Preferred qualifications include a master’s degree, red/blue/purple team penetration-testing experience, ArcGIS experience, AI security testing, FedRAMP or ISO security-control experience, coordinated vulnerability disclosure familiarity, and scripting or coding experience.
Benefits
- Medical, dental, vision, basic and supplemental life insurance, 401(k), and profit-sharing programs.
- At least 80 hours of vacation leave and twelve paid holidays annually.
- Opportunities for personal and professional growth.
- Remote position.
About Esri
Esri develops the ArcGIS geographic information system platform for mapping, spatial analytics, and location intelligence used by governments, utilities, transportation, natural resources, and commercial enterprises. The privately held company, founded in 1969 and headquartered in Redlands, California, monetizes through software licenses and subscriptions, cloud services, data, training, and consulting. Its tools power web and mobile mapping, geospatial APIs, and enterprise systems for planning, operations, and emergency management worldwide.