Application Security Engineer - DevSecOps & CI/CD (Remote)

GuidePoint Security, LLC; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote workforce primarily (U.S. based

Group Medical Insurance options

Dental Insurance

Paid holidays and flexible time off

Job summary

GuidePoint Security, LLC is seeking an experienced Application Security Engineer to support the Northeast Application Security practice, implementing SAST tooling and integrating security into CI/CD pipelines. You will develop automated testing capabilities, create custom detection rules, and promote secure development practices across the SDLC.

You will lead by influence, collaborate with client teams, and apply AI-assisted tooling to accelerate remediation guidance while delivering value

Qualifications

• Proficiency with implementing, operating, and troubleshooting SAST tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode).
• Understanding CI/CD pipeline tools and processes (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Experience in software engineering, ideally full stack development, including modern technologies and architectures.
• Strong scripting and automation experience using one or more programming languages.
• Solid knowledge of OWASP Top 10, threat modeling, and secure coding practices across the SDLC.
• Familiarity with AI-assisted tooling and proactive security integration into development.
• Excellent written and verbal communication skills.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules and triage vulnerabilities for remediation.
• Advise client development teams on secure coding practices throughout the SDLC.
• Leverage AI-assisted tooling to accelerate rule development and triage.
• Contribute to reusable pipeline patterns and rule libraries for AppSec practice.
• Deliver engagements across the Northeast/Mid-Atlantic with occasional on-site presence.

Skills

Communication skills

Automation scripting

DevSecOps mindset

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Burp Suite

Job description

GuidePoint Security, LLC is seeking an experienced Application Security Engineer to support the Northeast Application Security practice, implementing SAST tooling and integrating security into CI/CD pipelines. You will develop automated testing capabilities, create custom detection rules, and promote secure development practices across the SDLC.

You will lead by influence, collaborate with client teams, and apply AI-assisted tooling to accelerate remediation guidance while delivering value