Overview
As someone experienced with securing a wide variety of applications, you are looking for an opportunity to use your skills in an innovative and technology-oriented environment. As an Application Security Engineer at Esri, you will fill a critical role in helping secure Esri's intellectual property and sensitive data against a variety of complex threats with support from all levels of leadership. Our Application Security team collaborates closely with the application development, DevSecOps, and information security departments to design security into our applications up front, perform application layer security testing, and assist developers with vulnerability remediation. We value collaboration, pragmatic security, and continuous improvement. We welcome you to join Esri, where you can make a real difference every day!
Responsibilities
- Design, operate, and continuously improve application security testing capabilities and pipelines
- Assess application risks and recommend mitigations
- Perform application layer security reviews of the code developed by our application teams, across multiple languages and frameworks used internally
- Assist with application layer penetration testing to identify potential issues
- Provide application security guidance and mentorship to development teams as needed
Requirements
- 5+ years of experience in application security, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false positive analysis of code, pen test, and open-source security findings
- Demo