Sr. Application Security Engineer
Core
Design, operate, and improve application security testing pipelines; assess risks; perform code reviews and penetration testing for Esri's applications.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure application development pipelines and security testing capabilities
Domain
Software Security / DevSecOps
Required skills
Application security testing, manual and automated code reviews, penetration testing, risk management, Python/TypeScript/Java/PowerShell, GitHub Actions, Kubernetes security, cloud security (AWS/Azure), web security standards (HTTP/OAuth/REST)
Preferred skills
C#, Bash/Shell, SQL, AI-assisted coding security, layer 2-7 protocols
Technologies
Python, TypeScript, Java, PowerShell, GitHub Actions, Kubernetes, AWS, Azure
Responsibilities
Design and operate application security testing pipelines; assess application risks and recommend mitigations; perform application layer security reviews of code; assist with application layer penetration testing; provide security guidance to development teams
Seniority
Senior, hands-on IC
