Sr. Application Security Engineer
Core
Design, operate, and improve application security testing capabilities and pipelines to secure Esri's intellectual property and sensitive data against complex threats.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure application layer code and security testing pipelines for Esri's GIS software products
Domain
GIS technology, Cloud Security, DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security testing, manual and automated code reviews, penetration testing, risk management, Python/TypeScript/Java/PowerShell scripting, Kubernetes security, cloud platform security (AWS/Azure), web application security standards (HTTP/OAuth/OIDC/REST)
Preferred skills
C#/Bash/Shell/JavaScript/SQL proficiency, AI-assisted coding security implications, layer 2-7 communication protocols, encoding/encryption schemes
Technologies
GitHub Actions, Kubernetes, AWS, Azure, Python, TypeScript, Java, PowerShell
Responsibilities
Design and operate application security testing pipelines, assess application risks and recommend mitigations, perform application layer security reviews of code, assist with application layer penetration testing, provide security guidance and mentorship to development teams
Seniority
Senior, hands-on IC
