Product Security Incident Response Engineer II

ESRI; Redlands (CA); On-site; USD 92,000 - 149,000; Full time

Job summary

Esri's Software Security and Privacy team seeks an Incident Response Product Security Engineer in Redlands, CA. You will bridge software security, privacy, engineering and product development to advance the Incident Response Lifecycle and translate findings into actionable issues across the ArcGIS platform.

You will collaborate with engineers, security professionals, and customers to identify risks, communicate outcomes, and help shape secure software across Esri's products.

Qualifications

• 2+ years of experience with CSIRT, CIRT, or PSIRT functions in an enterprise-scale environment.
• Solid grasp of FIRST, OWASP top 10, SANS Top 25, CVE, and other frameworks.
• Experience with BURP Suite or similar automated security testing tools.
• Deep knowledge of Windows, Linux, cloud computing, and networking concepts.
• Deep understanding of common security weaknesses and attack/defense methodologies.
• Strong written and verbal communication skills, proven attention to detail.
• Ability to track, lead, and set priorities for numerous parallel projects and tasks.
• Bachelor's degree in computer science, engineering, information systems, data science, or related field.
• Visa sponsorship is not available for this posting. Applicants must be authorized to work for any employer in the U.S.

Responsibilities

• Use FIRST PSIRT Framework to implement and advance the Incident Response Lifecycle
• Validate, research, and translate identified security and privacy findings into concise issues
• Effectively communicate the outcomes of vulnerability investigations
• Facilitate red-teaming exercises to evaluate application security
• Identify common patterns of vulnerability and privacy risk exposure
• Effectively communicate and present software security and privacy risk metrics
• Write and maintain SOPs, processes, best practices, and procedural documents
• Collaborate with development teams and contribute to security best-practice technical papers, security advisories, and blogs

Skills

CSIRT/CIRT/PSIRT experience

Security incident response

Vulnerability assessment

Security communication

Project management

Education

Bachelor's degree in computer science or related field

Master's degree (preferred)

Tools

Burp Suite

ArcGIS software

Python scripting

Java/C++/-.Net

Job description

Esri's Software Security and Privacy team seeks an Incident Response Product Security Engineer in Redlands, CA. You will bridge software security, privacy, engineering and product development to advance the Incident Response Lifecycle and translate findings into actionable issues across the ArcGIS platform.

You will collaborate with engineers, security professionals, and customers to identify risks, communicate outcomes, and help shape secure software across Esri's products.