Incident Response Product Security Engineer
Esri5d • $91,728 - $148,512 • Remote
Security Engineer Jobs
5,290 jobs found — updated daily
Principal Information Security Engineer
UnitedHealth Group • Eden Prairie, MN5d • $112,700 - $193,200 • RemoteCyber Security Engineer
TherapyNotes.com • Philadelphia, PA5d • $110,000 - $130,000 • RemoteCyber Security Engineer
TherapyNotes.com • Philadelphia, PA5d • $110,000 - $130,000 • RemoteProduct Security Engineer
Boeing • Hazelwood, MO5d • OnsiteSenior Cyber Security Engineer
MANTECH • Chantilly, VA5d • $114,600 - $190,200 • OnsiteSenior Cyber Security Engineer
MANTECH • Chantilly, VA5d • $114,600 - $190,200 • OnsiteAWS Cloud Security & Guardrails Engineer
NorthHill Technology • Herndon, VA5d • OnsiteSr. AI Security Software Engineer
SpaceX • Hawthorne, CA5dCloud Security Engineer
Booz Allen Hamilton • McLean, VA5dPlatform Engineer
Quilter • Los Angeles, CA5dField Engineer - Mechanical
Consolidated Nuclear Security • Oak Ridge, TN5d • OnsiteSenior Security Engineer, Digital Forensics
Google • San Jose, CA5d • $174,000 - $252,000Staff Product Security Engineer
Google • Kirkland, WA5d • $207,000 - $300,000Information Systems Security Engineer
Booz Allen Hamilton • Usa, MD5dSenior Associate, Information Security Systems Engineer
L3Harris • Greenville, TX5dSr. Security Engineer
Fortellar • Chicago, IL5d • $140,000 - $160,000 • RemoteSr. Security Engineer - Identity & Endpoint
Fortellar • Chicago, IL5d • $130,000 - $155,000 • RemoteLead, Infrastructure Security Engineer
VB Spine, LLC • Allendale, NJ5d • $125,000 - $135,000Sr. Security & Fraud Engineer
Topgolf • Dallas, TX5d
Incident Response Product Security Engineer II
Esri
•$91,728 - $148,512•Remote
About The Position
Join Esri’s Software Security and Privacy team to help protect the technology organizations around the world use to understand and work with geographic information. This role sits at the intersection of software security, privacy, engineering, and product development, turning security challenges into improvements across Esri products and the ArcGIS platform. You will work with engineers, security professionals, product teams, and customers to identify, understand, and respond to emerging security and privacy risks. The position focuses on incident response and product security, including investigating security and privacy findings, evaluating application security, identifying risk patterns, communicating findings and metrics, and improving procedures. The role also collaborates with development teams on security best practices and related technical publications.
Requirements
- At least 2 years of experience with CSIRT, CIRT, or PSIRT functions in an enterprise-scale environment.
- Solid grasp of FIRST, OWASP Top 10, SANS Top 25, CVE, and other frameworks.
- Experience with Burp Suite or similar automated security testing tools.
- Deep knowledge of Windows, Linux, cloud computing, and networking concepts.
- Deep understanding of common security weaknesses and attack and defense methodologies.
- Strong written and verbal communication skills and proven attention to detail.
- Ability to track, lead, and set priorities for numerous parallel projects and tasks.
- Bachelor’s degree in computer science, engineering, information systems, data science, or a related field.
- Must be authorized to work for any employer in the U.S.; visa sponsorship is not available.
Nice To Haves
- Master’s degree in computer science, engineering, information systems, data science, or a related field.
- Experience with red/blue/purple team penetration-testing approaches.
- Extensive experience with ArcGIS software.
- Experience testing AI solutions for security flaws.
- Experience creating and testing security controls for FedRAMP or ISO certifications.
- Familiarity with coordinated vulnerability disclosure (CVD) processes.
- Scripting experience (such as Python, Perl, Ruby, or shell) or coding experience (Java, C++, or .NET).
Responsibilities
- Use the FIRST PSIRT Framework to implement and advance the Incident Response Lifecycle.
- Validate, research, and translate identified security and privacy findings into concise issues.
- Communicate the outcomes of vulnerability investigations.
- Facilitate red-teaming exercises to evaluate application security.
- Identify common patterns of vulnerability and privacy risk exposure.
- Communicate and present software security and privacy risk metrics.
- Write and maintain SOPs, processes, best practices, and procedural documents.
- Collaborate with development teams and contribute to security best-practice technical papers, security advisories, and blogs.
Benefits
- Medical, dental, and vision benefits.
- Basic and supplemental life insurance for employees and their families.
- 401(k) and profit-sharing programs.
- Minimum accrual of 80 hours of vacation leave.
- Twelve paid holidays throughout the calendar year.
- Opportunities for personal and professional growth.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Job Search Resources
Build a Resume for Security Engineer
The resume builder that gets results.
- Get clear feedback so you look as qualified as you are
- Align your resume with the job to get further in the process, faster
- Take the guesswork out of resume writing
