Remote Application Security Engineer - Northeast

GuidePoint Security LLC; Polska; Hybrid; PLN 469,000 - 626,000; Full time

Benefits offered by this job

Remote workforce primarily (U.S. based

Comprehensive health insurance options

Flexible time off

Mobile phone and home internet_ALLOW

Job summary

GuidePoint Security LLC is seeking an Application Security Engineer to support the Northeast practice, delivering SAST tooling integration, secure SDLC guidance, and DevSecOps automation for client projects.

The role emphasizes designing automated tests, developing custom rules, and collaborating with development teams to reduce risk while maintaining delivery velocity across the region.

Qualifications

• Proficiency with SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, and Veracode.
• Understanding of CI/CD pipelines and related tools (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Experience in software engineering, ideally full-stack development.
• Strong scripting and automation skills in one or more languages.
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC practices.
• Open to AI-assisted tooling and proactive security integration in development workflows.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules and triage vulnerabilities.
• Advise client teams on secure coding practices throughout the SDLC.
• Leverage AI-assisted tooling to accelerate rule development and remediation guidance.
• Contribute to reusable pipeline patterns and delivery accelerators for AppSec.
• Deliver engagements across the Northeast/Mid-Atlantic with on-site as needed.

Skills

SAST tooling

CI/CD integration

Software engineering

Scripting

AI tooling

Client communication

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security LLC is seeking an Application Security Engineer to support the Northeast practice, delivering SAST tooling integration, secure SDLC guidance, and DevSecOps automation for client projects.

The role emphasizes designing automated tests, developing custom rules, and collaborating with development teams to reduce risk while maintaining delivery velocity across the region.