Application Security Engineer Position Available In Washington, Pennsylvania

Job Description:

Overview As someone enthusiastic about securing a wide varietyof applications, you are looking for an opportunity to learn aboutApplication Security and contribute to an innovative andtechnology-oriented environment. As an Application SecurityEngineer at Esri, you will work with our team to secure Esrisintellectual property, networks, and sensitive data against avariety of complex threats, with support from all levels ofleadership. We collaborate closely with the applicationdevelopment, DevSecOps, and information security departments todesign security into our applications up front, perform applicationlayer security testing, and assist developers with vulnerabilityremediation. We welcome you to join Esri, where you can make a realdifference every day! Responsibilities Create, deploy, maintain andtroubleshoot Web Application Firewall (WAF) policies for existingand new web applications Monitor and analyze activity logs todetect malicious internet traffic and indicators of compromise aswell as to reduce false positive blocks Review WAF usage and definemeans to improve and mature protection policies Collaborate closelywith application developers to analyze findings and implementrequired remediations or countermeasures Help assess and calculateapplication risks, communicate your findings to stakeholders ofvarying technical skill levels Assist leadership with organizationof ongoing work across the team, policy and documentation creation,and preparation of relevant metrics on findings and remediationactivity for leadership Interpret web protocol information todetermine source, intent, and risk of threats Provide operationalsupport, troubleshoot and quickly resolve problems Create andmaintain technical documentation regarding the WAF includingnetwork diagrams, policies and operational procedures for managingthe infrastructure Requirements 2 years of relevant, full-timeexperience Thorough understanding of

HTTP, TLS, DNS

Knowledge ofcommon web vulnerabilities, including those outlined in the OWASPTop 10, and how to mitigate them Familiarity with cloudinfrastructure, network routing and basic infrastructure componentsModerate understanding of JavaScript and its role in modern webapplications Demonstrated ability to independently learn and adaptto new technologies Strong organizational skills and adetail-oriented approach Strong verbal and written communicationand collaboration skills Bachelor’s in Computer Science or relatedSTEM field Recommended Qualifications Hands-on experience using webapplication firewall solutions such as offerings from Akamai, AWS,F5, or Fortinet Experience using Splunk to analyze logs and detectmalicious activity Proficiency in scripting languages such asJavaScript, Python, Bash, or PowerShell for automation Experienceusing APIs for automation, integration, or data analysisFamiliarity with Git Understanding of common encoding andencryption schemes, and algorithms LI-TM1 LI-Remote Total RewardsEsri’s competitive total rewards strategy includes industry-leadinghealth and welfare benefits: medical, dental, vision, basic andsupplemental life insurance for employees (and their families),401(k) and profit-sharing programs, minimum accrual of 80 hours ofvacation leave, twelve paid holidays throughout the calendar year,and opportunities for personal and professional growth. Base salaryis one component of our total rewards strategy. Compensationdecisions and the base range for this role take into account manyfactors including but not limited to skill sets; experience andtraining; licensure and certifications; and other business andorganizational needs. A reasonable estimate of the base salaryrange is $73,840-$128,440 USD About Esri At Esri, diversity is morethan just a word on a map. When employees of different experiences,perspectives, backgrounds, and cultures come together, we are moreinnovative and ultimately a better place to work. We believe inhaving a diverse workforce that is unified under our mission ofcreating positive global change. We understand that diversity,equity, and inclusion is not a destination but an ongoing process.

We are committed to the continuation of learning, growing, andchanging our workplace so every employee can contribute to theirlife’s best work. Our commitment to these principles extends to theglobal communities we serve by creating positive change with GIStechnology. For more information on Esri’s Racial Equity and SocialJustice initiatives, please visit our website here. If you don’tmeet all of the preferred qualifications for this position, weencourage you to still apply! Esri is an equal opportunity employer(EOE) and all qualified applicants will receive consideration foremployment without regard to race, color, religion, sex, sexualorientation, gender identity, national origin, disability status,protected veteran status, or any other characteristic protected bylaw. If you need reasonable accommodation for any part of theemployment process, please email askcareers@esri.com and let usknow the nature of your request and your contact information.

Please note that only those inquiries concerning a request forreasonable accommodation will be responded to from this e-mailaddress. Esri Privacy Esri takes our responsibility to protect yourprivacy seriously. We are committed to respecting your privacy byproviding transparency in how we acquire and use your information,giving you control of your information and preferences, and holdingourselves to the highest national and international standards,including CCPA and GDPR compliance.