Senior AppSec Engineer - DevSecOps & AI-Driven Security

NextGenEnergyJobs; Vienna, Northern (VA, KY); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Esri in Vienna, VA is seeking an experienced Application Security Engineer to design and operate security testing pipelines across multiple languages. You will assess risks, review application layer code, and assist with penetration testing while mentoring developers on security best practices.

You will build automations using Python/Typescript/PowerShell, manage GitHub Actions workflows, and contribute to secure DevSecOps in a Kubernetes environment on AWS/Azure, with a focus on safeguarding

Qualifications

• 5+ years of experience in application security, incl. manual & automated reviews, pentesting, and analysis of code, pen tests and OSS findings
• Risk analysis using a consistent framework
• Experience automating security with code
• Familiarity with AI-assisted coding and security implications

Responsibilities

• Design, operate, and continuously improve application security testing capabilities and pipelines
• Assess application risks and recommend mitigations
• Perform application layer security reviews of code across languages/frameworks
• Assist with application layer penetration testing
• Provide security guidance and mentorship to development teams

Skills

AppSec

Python

Typescript

Java

PowerShell

GitHub Actions

Kubernetes security

AWS

Azure

Code review

Security testing

Education

Bachelor's degree in computer science or related field

Tools

GitHub Actions

Kubernetes

AWS

Azure

Job description

Esri in Vienna, VA is seeking an experienced Application Security Engineer to design and operate security testing pipelines across multiple languages. You will assess risks, review application layer code, and assist with penetration testing while mentoring developers on security best practices.

You will build automations using Python/Typescript/PowerShell, manage GitHub Actions workflows, and contribute to secure DevSecOps in a Kubernetes environment on AWS/Azure, with a focus on safeguarding