Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist GuidePoint Security’s Application Security practice within the North Central region.

• Create secure software development lifecycle programs.

• Embed security into DevSecOps pipelines.

• Conduct security assessments for AI-enabled and agentic applications.

• Operate and optimize SAST, DAST, SCA, secrets, and IaC scanning tools.

• Analyze scan results, eliminate false positives, and offer prioritized remediation recommendations.

• Design and implement security integrations across CI/CD pipelines, source control, IDEs, and ticketing systems.

• Set up policy gates and break-the-build criteria.

• Collaborate with development teams on remediation, secure coding, and developer enablement.

• Evaluate and strengthen software supply chain controls, including SBOMs, dependency and container image scanning, artifact signing, and pipeline/runner security.

• Carry out threat modeling and security architecture reviews for cloud-native, microservice, container, and Infrastructure-as-Code environments.

• Utilize AI-assisted and agentic tooling to expedite testing, triage, reporting, and remediation.

• Counsel clients on the secure adoption of AI coding assistants.

• Establish AppSec metrics, vulnerability management SLAs, and maturity roadmaps in alignment with OWASP SAMM, BSIMM, and NIST SSDF.

• Generate client-ready deliverables and present findings to both technical and executive audiences.

• Contribute to the growth of the AppSec practice through tooling, methodologies, and knowledge sharing.

• Provide support to clients, internal customers, and colleagues.

⛳️ Requirements

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a focus on security.

• Enthusiastic about emerging technologies, including AI tools.

• Practical experience with SAST, DAST, and SCA tools and their integration into CI/CD pipelines such as Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or Bamboo.

• Proficient in using Burp Suite Pro.

• Strong comprehension of the OWASP Top 10 and OWASP API Security Top 10 along with their mitigation strategies.

• Solid working knowledge of secure development lifecycles.

• Experience in guiding the remediation of vulnerabilities identified by application security tools.

• Ability to review source code in languages such as JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++.

• Familiarity with AWS, Azure, or GCP.

• Knowledge of containers and Git-based development workflows.

• Excellent written and verbal communication skills.

• Preferred: Experience with Invicti and/or Checkmarx; familiarity with other platforms like Snyk, Veracode, Black Duck, Semgrep, or GitHub Advanced Security.

• Preferred: Experience in building agentic AI workflows or automation using Python, Bash, or PowerShell.

• Preferred: Knowledge of software supply chain security, SBOM, SLSA, Sigstore, IaC/container security scanning, threat modeling, and AppSec maturity frameworks.

• Preferred: Industry certifications such as GWAPT, OSWE, OSCP, CSSLP, CDP, or AWS Certified Security – Specialty.

• Preferred: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.

• Up to 10% travel required.

• Sedentary work environment.

• Significant wrist, hand, and/or finger movement for a minimum of 8 hours daily.

• Close visual acuity for computer terminal work and/or extensive reading for at least 8 hours daily.

🏝️ Benefits

• Primarily a remote workforce (U.S. based only).

• Some travel may be necessary for specific positions.

• Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint covering 90% of employee premiums and 70% of family premiums.

• High Deductible Health Plan with HSA, with GuidePoint covering 100% of employee premiums and 75% of family premiums.

• HSA contributions: $850 annually for employees or $1,750 annually for families.

• Group Dental Insurance with GuidePoint covering 100% of employee premiums and 75% of family premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Healthy mobile phone and home internet allowance.

• Eligibility for retirement plan after 2 months at open enrollment.

• Pet Benefit Option.

• Opportunities for mentorship and guidance.

• Potential for career advancement.