Senior Application Security Engineer

Esri

. Design, operate, and continuously improve application security testing capabilities and pipelines .

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $93,600 - $157,560 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in application security, including manual and automated code reviews, penetration testing, and risk assessment. Proficient in developing automation solutions using programming languages such as Python and TypeScript, while ensuring adherence to web application security standards.

Highest-signal resume keywords

Application SecurityManual Penetration TestingDynamic Application Security TestingKubernetes Security Best PracticesAWS and Azure Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonTypeScriptJavaPowerShellC#Bash/ShellJavaScriptSQLCode ReviewRisk Management Framework

Soft Skills

MentorshipCollaborationWillingness to Learn

Tools & Technologies

GitHub ActionsKubernetesAI ToolsApplication Security Testing ToolsOpen-Source Scanners

Industry Keywords

Web Application Security StandardsHTTPOAuthOIDCRESTLayer 2–7 Communication ProtocolsEncoding and Encryption Schemes

Tech Stack

Tools & technologies

AWSAzureJavaJavaScriptKubernetesPythonSQLTypeScript

About the role

Key responsibilities & impact

Design, operate, and continuously improve application security testing capabilities and pipelines
Assess application risks and recommend mitigations
Perform application-layer security reviews of code across multiple languages and frameworks
Assist with application-layer penetration testing to identify potential issues
Provide application security guidance and mentorship to development teams
Collaborate with application development, DevSecOps, and information security departments

Requirements

What you’ll need

5+ years of experience in application security, including manual and automated code reviews, manual penetration testing, dynamic application security testing, and false positive analysis
Experience determining risk using a consistent risk management framework
Ability to develop automations/applications using Python, TypeScript, Java, or PowerShell
Experience creating and maintaining reusable GitHub Actions workflows
Hands-on experience in a Kubernetes-based DevSecOps environment and knowledge of Kubernetes security best practices
Ability to read and analyze code for security and design vulnerabilities
Understanding of web application security standards including HTTP, OAuth, OIDC, and REST
Experience with AWS and Azure
Willingness to learn new skills and enhance workflows using AI tools
US citizenship and willingness and ability to maintain a US Security Clearance
Ability to incorporate security and data privacy safeguards into work activities
Bachelor’s degree in computer science or related field
Recommended qualifications include proficiency in C#, Python, Bash/Shell, PowerShell, JavaScript, SQL, or Java
Familiarity with AI-assisted coding practices and security implications of AI-generated code
Practical experience interpreting application penetration testing, code scanning, and open-source scanner findings
Understanding of layer 2–7 communication protocols, encoding and encryption schemes, and algorithms

Benefits

Comp & perks

Medical, dental, and vision benefits
Basic and supplemental life insurance for employees and their families
401(k) and profit-sharing programs
Minimum accrual of 80 hours of vacation leave
Twelve paid holidays throughout the calendar year
Opportunities for personal and professional growth