Application Security Engineer - Northeast region

guidepointsecurity; USA; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Group medical insurance (PPO/HSA)

Group dental insurance

12 corporate holidays

Flexible time off

Mobile phone and home internet stipend

Zusammenfassung

GuidePoint Security is seeking an Application Security Engineer to support a regional AppSec practice, helping clients secure how they build and deliver software. The role focuses on deploying and tuning tooling, embedding security testing into pipelines, and advising engineering teams on secure development practices, with up to 10% travel.

You will work in a consultative, client-facing capacity, deploying SAST platforms across client environments and contributing to reusable patterns for the

Qualifikationen

• Experience implementing, operating, and troubleshooting SAST tools across major vendors.
• Solid understanding of CI/CD pipelines and build/deploy automation.
• Software engineering background, ideally full stack, with security tooling experience.
• Prior work as an application security practitioner or software engineer.

Aufgaben

• Deploy, operationalize, and troubleshoot SAST platforms in client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules; triage and guide remediation of vulnerabilities.
• Advise client development teams on OWASP Top 10, threat modeling, and secure coding across the SDLC.
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance.
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the broader AppSec practice.

Kenntnisse

SAST tooling

CI/CD pipelines

Full stack software engineering

Secure development processes

AppSec experience

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

CircleCI

Jobbeschreibung

Role overview

An Application Security Engineer position supporting a regional AppSec practice that helps organizations secure how they build and deliver software. The role centers on deploying and tuning application security tooling, embedding automated security testing into development pipelines, and advising engineering teams on secure development practices across the software lifecycle. It is a consultative, client-facing engineering role with up to 10% travel.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms (such as Semgrep, Snyk, CodeQL, Checkmarx, or Veracode) inside client environments.
• Design and integrate automated security testing into CI/CD pipelines using GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, or CircleCI.
• Author and adapt custom SAST rules, then triage, validate, and guide remediation of identified vulnerabilities.
• Advise client development teams on OWASP Top 10, threat modeling, and secure coding practices throughout the SDLC.
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance.
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the broader AppSec practice.

Requirements

• Proficiency implementing, operationalizing, and troubleshooting SAST tools across major vendors.
• Solid understanding of CI/CD pipeline tools and processes, including build and deployment automation.
• Software engineering background, ideally full stack, with experience building and operating security tooling inside pipelines.
• Practical experience with proactive integration of security into the development process.
• Prior work as an application security practitioner or software engineer.

Benefits and work setup

• Primarily remote U.S.-based workforce with occasional on-site presence as needed.
• Group medical insurance options (PPO with low deductible or high-deductible HSA plan) with employer premium contributions.
• Group dental insurance, twelve corporate holidays, and a flexible time off program.
• Mobile phone and home internet allowance, retirement plan eligibility, and a pet benefit option.