Sr. Application Security Engineer
Core
Design, operate, and improve application security testing pipelines; assess risks; perform code reviews and penetration testing for Esri's applications.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure application pipelines and codebases for Esri's GIS software
Domain
Enterprise Software / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security testing, manual and automated code reviews, penetration testing, risk management, Python/TypeScript/Java/PowerShell scripting, GitHub Actions, Kubernetes security, cloud security (AWS/Azure), web security standards (HTTP/OAuth/REST)
Preferred skills
C#/Bash/SQL/JavaScript, AI-assisted coding security, layer 2-7 protocols, encryption algorithms
Technologies
Python, TypeScript, Java, PowerShell, GitHub Actions, Kubernetes, AWS, Azure
Responsibilities
Design and maintain application security testing pipelines; assess application risks and recommend mitigations; perform application layer security reviews of code; assist with application layer penetration testing; provide security guidance to development teams
Seniority
Senior, hands-on IC
