Incident Response Product Security Engineer II

Esri

. Use FIRST PSIRT Framework to implement and advance the Incident Response Lifecycle .

Posted 11/3/2026full-timeRemote • United StatesJuniorMid-Level💰 $91,728 - $148,512 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing the FIRST PSIRT Framework and advancing the Incident Response Lifecycle, with a strong focus on vulnerability assessment and application security. Proficient in communicating security metrics and collaborating with development teams to enhance security practices.

Highest-signal resume keywords

FIRST PSIRT Framework ImplementationVulnerability Investigation CommunicationExperience with BURP SuiteKnowledge of OWASP Top 10Bachelor’s Degree in Computer Science

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CSIRT FunctionsCIRT FunctionsPSIRT FunctionsSecurity Weaknesses UnderstandingAttack/Defense Methodologies

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationAttention to DetailProject Management

Tools & Technologies

BURP SuiteCloud ComputingWindowsLinuxNetworking Concepts

Industry Keywords

Incident Response LifecycleSecurity Best PracticesVulnerability Risk ExposureSOPsSecurity Advisories

Tech Stack

Tools & technologies

CloudLinux

About the role

Key responsibilities & impact

Use FIRST PSIRT Framework to implement and advance the Incident Response Lifecycle
Validate, research, and translate identified security and privacy findings into concise issues
Communicate the outcomes of vulnerability investigations
Facilitate red-teaming exercises to evaluate application security
Identify common patterns of vulnerability and privacy risk exposure
Communicate and present software security and privacy risk metrics
Write and maintain SOPs, processes, best practices, and procedural documents
Collaborate with development teams and contribute to security best-practice technical papers, security advisories, and blogs

Requirements

What you’ll need

2+ years of experience with CSIRT, CIRT, or PSIRT functions in an enterprise-scale environment
Solid grasp of FIRST, OWASP Top 10, SANS Top 25, CVE, and other frameworks
Experience with BURP Suite or similar automated security testing tools
Deep knowledge of Windows, Linux, cloud computing, and networking concepts
Deep understanding of common security weaknesses and attack/defense methodologies
Strong written and verbal communication skills and proven attention to detail
Ability to track, lead, and set priorities for numerous parallel projects and tasks
Bachelor’s degree in computer science, engineering, information systems, data science, or related field
Applicants must be authorized to work for any employer in the U.S.; visa sponsorship is not available

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Basic and supplemental life insurance for employees and their families
401(k) program
Profit-sharing programs
Minimum accrual of 80 hours of vacation leave
Twelve paid holidays throughout the calendar year
Opportunities for personal and professional growth