Remote AppSec Engineer – Southeast Region

GuidePoint Security LLC; Polska; Hybrid; PLN 469,000 - 665,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

12 corporate holidays

Flexible time off

Internet/mobile allowance

Job summary

GuidePoint Security is seeking an experienced Application Security Engineer to support the Southeast practice, delivering security engineering services including SAST tooling, CI/CD security, and secure SDLC adoption. You will develop automated security testing capabilities, author custom rules, and guide remediation while engaging client teams with strong communication and DevSecOps mindset.

Remote role with travel up to 10%.

Qualifications

• Must have experience implementing, operating, and troubleshooting SAST tooling (Semgrep, Snyk, CodeQL, Checkmarx, Veracode)
• Familiarity with CI/CD pipelines and tooling (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI)
• Background in software engineering, full-stack development
• Strong scripting/automation experience in one or more languages
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC practices
• Willingness to embrace AI tools to improve security workflows
• Excellent written and verbal communication skills

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments
• Design/integrate automated security testing into CI/CD pipelines
• Author/adapt custom SAST rules and guide remediation of vulnerabilities
• Advise client dev teams on OWASP Top 10 and secure coding throughout SDLC
• Leverage AI-assisted tooling to accelerate rule development and remediation guidance
• Develop reusable pipeline patterns, rule libraries, and delivery accelerators
• Deliver engagements across the Southeast region with occasional on-site presence as needed

Skills

SAST tooling proficiency

CI/CD integration

Software engineering

Automation scripting

OWASP Top 10 knowledge

AI tooling awareness

Communication skills

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

Job description

GuidePoint Security is seeking an experienced Application Security Engineer to support the Southeast practice, delivering security engineering services including SAST tooling, CI/CD security, and secure SDLC adoption. You will develop automated security testing capabilities, author custom rules, and guide remediation while engaging client teams with strong communication and DevSecOps mindset.

Remote role with travel up to 10%.