Incident Response Product Security Engineer II
Core
Implement and advance the Incident Response Lifecycle using the FIRST PSIRT Framework to protect Esri's ArcGIS platform and software products.
Role type
Senior IC Product Security Engineer (Incident Response)
Builds
Security advisories, SOPs, and improved security posture for Esri's global GIS software.
Domain
Software Security / Cybersecurity / GIS
Required skills
FIRST PSIRT Framework, vulnerability research, red-teaming facilitation, security metrics analysis, SOP creation, technical writing, project prioritization
Preferred skills
Pen-testing (red/blue/purple), ArcGIS software expertise, AI security testing, FedRAMP/ISO certification controls, Coordinated Vulnerability Disclosure (CVD), Python/Perl/Ruby/Java/C++ scripting
Technologies
BURP Suite, Windows, Linux, Cloud Computing, Networking, CVE, OWASP Top 10, SANS Top 25
Responsibilities
Validate and translate security findings into concise issues, communicate vulnerability investigation outcomes, facilitate red-teaming exercises, identify vulnerability patterns, present security risk metrics, write and maintain security processes and best practices
Seniority
Mid-Senior, hands-on IC
