Application Security Engineer - Southeast region

guidepointsecurity; USA; Hybrid; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Paid time off

Holiday schedule

Phone allowance

Internet allowance

Pet benefit

Travel allowance

Zusammenfassung

GuidePoint Security is seeking a regional Application Security Engineer to embed security into the software development lifecycle for enterprise and government clients in the Southeast region.

The role combines hands-on engineering, security tooling expertise, and client advisory work across DevSecOps initiatives. Primarily remote within the US with occasional on-site as needed.

Qualifikationen

• Implement and optimize SAST platforms in production environments.
• Advise on secure coding practices across SDLC.
• Proactively integrate security into development workflows.

Aufgaben

• Implement, operate, and troubleshoot SAST platforms in client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author custom SAST rules and guide remediation of vulnerabilities.
• Advise developers on OWASP Top 10 and secure coding.
• Leverage AI-assisted tooling to speed rule development and triage.
• Contribute to reusable pipeline patterns and rule libraries.

Kenntnisse

Security tooling expertise

CI/CD security integration

DevSecOps practices

SAST/DAST knowledge

Threat modeling

OWASP Top 10 awareness

AI-assisted tooling awareness

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Jobbeschreibung

Role overview

A regional Application Security Engineer position focused on embedding security into the software development lifecycle for enterprise and government organizations. The role combines hands‑on engineering, security tooling expertise, and client advisory work across DevSecOps initiatives in the Southeast region.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments, including tools like Semgrep, Snyk, CodeQL, Checkmarx, and Veracode
• Design and integrate automated security testing into CI/CD pipelines such as GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, and CircleCI
• Author custom SAST rules and guide remediation of identified vulnerabilities across development teams
• Advise developers on OWASP Top 10, threat modeling, and secure coding practices throughout the SDLC
• Leverage AI‑assisted tooling to accelerate rule development, triage, and remediation guidance
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the practice

Requirements

• Proficiency deploying and tuning Static Application Security Testing tools in production environments
• Strong understanding of CI/CD pipeline tools and processes across major platforms
• Background in software engineering, ideally full stack development
• Experience building and operating security tools within CI/CD pipelines
• Demonstrated history as an application security practitioner or software engineer
• Experience integrating security proactively into the development process

Nice to have

• Familiarity with maturity frameworks such as NIST SSDF and OWASP SAMM
• Knowledge of software supply chain practices including SLSA and SBOM
• Experience advising teams on AI‑assisted and AI agent‑driven development

Benefits and work setup

• Primarily remote workforce within the U.S., with occasional on‑site presence as needed
• Group medical insurance options including a zero‑deductible PPO plan and high‑deductible health plan with HSA contributions
• Group dental insurance with employer‑covered premiums
• 12 corporate holidays and a flexible time off program
• Mobile phone and home internet allowance, plus pet benefit option
• Up to 10% travel