Senior Application Security Engineer

Esri·Remote, Oregon·Posted 5d ago·via Talent.com

RegionUSA
Apply Now

Job description

Job Description: - Design, operate, and continuously improve application security testing capabilities and pipelines

  • Assess application risks and recommend mitigations
  • Perform application-layer security reviews of code across multiple languages and frameworks
  • Assist with application-layer penetration testing to identify potential issues
  • Provide application security guidance and mentorship to development teams
  • Collaborate with application development, DevSecOps, and information security departments

Requirements: - 5+ years of experience in application security, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false positive analysis

  • Experience determining risk using a consistent risk management framework
  • Ability to develop automations/applications using Python, TypeScript, Java, or PowerShell
  • Experience creating and maintaining reusable GitHub Actions workflows
  • Hands-on experience in a Kubernetes-based DevSecOps environment and knowledge of Kubernetes security best practices
  • Ability to read and analyze code for security and design vulnerabilities
  • Understanding of web application security standards including HTTP, OAuth, OIDC, and REST
  • Experience with AWS and Azure
  • Willingness to learn new skills and enhance workflows using AI tools
  • US citizenship and willingness and ability to maintain a US Security Clearance
  • Ability to incorporate security and data privacy safeguards into work activities
  • Bachelor’s degree in computer science or related field
  • Recommended qualifications include proficiency in C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java
  • Familiarity with AI-assisted coding practices and security implications of AI-generated code
  • Practical experience interpreting application penetration testing, code scanning, and open-source scanner findings
  • Understanding of layer 2–7 communication protocols, encoding and encryption schemes, and algorithms

Benefits: - Medical, dental, and vision benefits

  • Basic and supplemental life insurance for employees and their families
  • 401(k) and profit-sharing programs
  • Minimum accrual of 80 hours of vacation leave
  • Twelve paid holidays throughout the calendar year
  • Opportunities for personal and professional growth

first seen 2026-11-05 09:30:01 · last verified 2026-11-05 17:30:01


pentestcareers.com // breach the job market

Senior Application Security Engineer at Esri | Pentest Careers