Incident Response Product Security Engineer II
Core
Implement and advance the Incident Response Lifecycle using the FIRST PSIRT Framework to protect Esri's ArcGIS platform and translate security findings into product improvements.
Role type
Senior IC Product Security Engineer (Incident Response)
Builds
Security advisories, SOPs, and risk metrics for the ArcGIS platform
Domain
Software Security & Privacy
Required skills
FIRST PSIRT Framework, vulnerability research, red-teaming facilitation, security metrics communication, SOP creation, technical writing, project prioritization
Preferred skills
Red/blue/purple teaming, ArcGIS software testing, AI security testing, FedRAMP/ISO controls, Coordinated Vulnerability Disclosure (CVD), Python/Perl/Ruby/Java/C++ scripting
Technologies
BURP Suite, Windows, Linux, Cloud Computing, Networking
Responsibilities
Implement FIRST PSIRT Framework, validate and translate security findings, communicate vulnerability outcomes, facilitate red-teaming exercises, identify vulnerability patterns, present risk metrics, write SOPs and security advisories
Seniority
Mid-Senior, hands-on IC
