Senior App Security Engineer - Remote DevSecOps Leader

Telemetry Today LLC; Redlands (CA); Remote; USD 94,000 - 158,000; Full time

Job summary

Esri in Redlands, CA, is seeking an experienced Application Security Engineer to protect our applications and data. You will design secure pipelines, perform code reviews, and guide developers in remediation across languages and platforms.

The role requires hands-on security testing (SAST/DAST), experience with Kubernetes, AWS/Azure, and GitHub Actions, and a security mindset partnering with DevSecOps and product teams to reduce risk and improve processes.

Qualifications

• 5+ years of application security experience with code reviews and pen testing.
• Experience with risk analysis using a formal framework.
• Experience building automations using Python, TypeScript, Java, or PowerShell.
• Proven GitHub Actions workflow automation experience.
• DevSecOps in Kubernetes with cloud (AWS/Azure) knowledge.
• Reading and analyzing code for security vulnerabilities.
• Understanding HTTP, OAuth, OIDC, REST security standards.
• US citizenship and ability to obtain US Security Clearance.
• Bachelor’s degree in CS or related field.

Responsibilities

• Design, operate, and improve application security testing capabilities and pipelines.
• Assess application risks and mitigations.
• Perform application layer security reviews across languages.
• Assist with application layer penetration testing.
• Provide application security guidance to development teams.

Skills

Python

TypeScript

Java

PowerShell

Code review

Penetration testing

Risk analysis

DevSecOps

Threat modeling

Communication

Education

Bachelor’s degree in computer science or related field

Tools

GitHub Actions

Kubernetes

AWS

Azure

OAuth

REST APIs

Job description

Esri in Redlands, CA, is seeking an experienced Application Security Engineer to protect our applications and data. You will design secure pipelines, perform code reviews, and guide developers in remediation across languages and platforms.

The role requires hands-on security testing (SAST/DAST), experience with Kubernetes, AWS/Azure, and GitHub Actions, and a security mindset partnering with DevSecOps and product teams to reduce risk and improve processes.