Product Security Incident Response Engineer II

Telemetry Today LLC; Redlands (CA); Presencial; USD 92 000 - 149 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Dental

Vision

Life insurance

401(k)

Profit sharing

Vacation leave

Paid holidays

Growth opportunities

Resumo da oferta

Esri is seeking an Incident Response Product Security Engineer to join the Software Security and Privacy team in Redlands, CA. You will help protect ArcGIS products by identifying security and privacy risks, translating findings into actionable issues, and leading security-focused collaboration across engineering teams.

The role emphasizes cross-functional work, vulnerability investigations, and participation in red/blue team activities to improve security posture at global scale.

Qualificações

• 2+ years of CSIRT/CIRT/PSIRT in an enterprise environment.
• Knowledge of FIRST, OWASP Top 10, CVE, SANS Top 25.
• Experience with BURP Suite or similar tools.
• Solid Windows/Linux, cloud computing, and networking knowledge.
• Strong written and verbal communication skills.
• Bachelor’s degree in CS/Engineering/IS/DS is required.

Responsabilidades

• Implement and advance Incident Response Lifecycle using FIRST PSIRT.
• Translate findings into concise issues and communicate outcomes.
• Lead red-teaming exercises to evaluate application security.
• Identify vulnerability and privacy risk patterns and metrics.
• Produce SOPs, security papers, advisories, and blogs.
• Collaborate with dev teams to promote security best practices.

Conhecimentos

CSIRT/PSIRT experience

FIRST/OWASP/SANS knowledge

Burp Suite experience

Windows/Linux/Cloud

Risk communication

Project management

Formação académica

Bachelor's degree in CS/Engineering/IS/DS

Ferramentas

Burp Suite

ArcGIS software

Python

Descrição da oferta de emprego

Esri is seeking an Incident Response Product Security Engineer to join the Software Security and Privacy team in Redlands, CA. You will help protect ArcGIS products by identifying security and privacy risks, translating findings into actionable issues, and leading security-focused collaboration across engineering teams.

The role emphasizes cross-functional work, vulnerability investigations, and participation in red/blue team activities to improve security posture at global scale.