Remote AppSec Engineer - North Central

GuidePoint Security LLC; Polska; Hybrid; PLN 352,000 - 509,000; Full time

Benefits offered by this job

Remote work

Group Medical Insurance

12 corporate holidays

Flexible Time Off

Job summary

GuidePoint Security is seeking an Application Security Engineer to support the North Central region, focusing on SSDLC, DevSecOps automation, and security assessments for AI-enabled applications. The role requires hands-on testing, secure code review, and collaboration with client engineering teams to embed security across the SDLC.

You will lead security tooling integrations into CI/CD pipelines and influence secure development practices, with ongoing focus on threat modeling and frameworks

Qualifications

• 1–3+ years in Application Security, DevSecOps, or security-focused software development.
• Experience with SAST/DAST/SCA tools and CI/CD integrations.
• Hands-on with Burp Suite Pro and OWASP Top 10/OWASP API Security Top 10.
• Knowledge of cloud platforms (AWS/Azure/GCP) and container workflows.
• Ability to convey complex findings to technical and executive audiences.

Responsibilities

• Run and tune SAST/DAST/SCA scanning, triage results, reduce false positives.
• Design and implement security tool integrations into CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins).
• Partner with development teams on remediation and secure coding guidance.
• Assess and harden software supply chain controls (SBOM, dependency and image scanning).
• Perform threat modeling and security architecture reviews for cloud-native environments.
• Leverage AI-assisted tooling to accelerate testing and reporting, advising on secure AI adoption.

Skills

SAST

DAST

SCA

CI/CD pipelines

Burp Suite Pro

OWASP Top 10

Cloud platforms

DevSecOps automation

Security testing

Communication

Education

Bachelor’s degree in Computer Science / Information Security

Tools

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Invicti

Checkmarx

Snyk

Semgrep

Job description

GuidePoint Security is seeking an Application Security Engineer to support the North Central region, focusing on SSDLC, DevSecOps automation, and security assessments for AI-enabled applications. The role requires hands-on testing, secure code review, and collaboration with client engineering teams to embed security across the SDLC.

You will lead security tooling integrations into CI/CD pipelines and influence secure development practices, with ongoing focus on threat modeling and frameworks