Software Security Engineer II

Overview

Come join a creative engineering team at Esri focused on designing and developing the next generation of solutions for securing ArcGIS applications and services. We’re looking for a sharp, user-focused security engineer to join our Software Security & Privacy team to help push the boundaries of security while putting their mark on next-gen Esri software. Join our talented team and help secure new and exciting products that run on browsers, enterprise class servers, and in the cloud.

Responsibilities

• Identify and resolve issues with security design & development patterns
• Test security features and report flaws; participate in remediation of issues
• Collaborate with other developers, engineers, and product managers throughout the development process
• Advance customer-facing security guidance for products (technical papers, and/or presentations)
• Learn Esri’s ArcGIS Products & participate in training opportunities
• Assist with Esri’s compliance obligation and alignment efforts
• Develop and maintain security applications and libraries
• Triage security tool vulnerability findings
• Work with security tool vendor support to address analysis issues
• Research issues related to AWS and Azure for remediation or mitigation

Requirements

• 2+ years of professional experience supporting security and privacy responsibilities
• Strong foundation supporting virtualized and containerized infrastructure
• Knowledge of at least one of the following scripting languages such as Python, PowerShell, Bash, JavaScript, Typescript
• Knowledge of web service protocols including such as REST, SOAP, XML, JSON
• Ability to analyze software/algorithms and identify improvements
• Knowledge of AWS and Azure services and configurations
• Knowledge of OWASP, CVEs and CWEs
• Knowledge of SQL for databases
• Excellent written & verbal communication skills and willingness to work with diverse teams
• Bachelor’s in computer science, engineering, or other STEM field

Recommended Qualifications

• Knowledge/willingness to learn software security component analysis
• Direct experience supporting Virtual Machines, Containers, and Kubernetes solutions
• Knowledge of the ArcGIS Products
• Experience driving web APIs using tools such as Postman, Fiddler, or Scripting
• Experience generating SBOM (Software Bill of Materials)
• Experience managing patches and updates to security tools
• Familiarity with Esri’s ArcGIS JS-API is a plus
• Familiarity with security compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, and FedRAMP

#LI-AL1

#LI-Remote