DevSecOps Application Security Engineer

guidepointsecurity; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

GuidePoint Security is seeking an Application Security Engineer to support the Northeast practice. You will implement, operate, and tune SAST tooling, integrate security into CI/CD pipelines, and advance secure development practices across the SDLC.

You will lead in automation, rule development, and remediation guidance while delivering client engagements in the Northeast/Mid-Atlantic region, with occasional on-site work.

Qualifications

• Proficiency with Static Application Security Testing (SAST) tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode).
• Experience integrating security controls into CI/CD pipelines (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Strong software engineering background and scripting/automation skills.
• Solid knowledge of OWASP Top 10 and secure SDLC practices.
• Experience using AI-assisted tooling to improve security engineering outcomes.

Responsibilities

• Implement and operationalize SAST platforms within client environments.
• Design automated security testing into CI/CD pipelines.
• Develop and adapt custom SAST rules and guide remediation of vulnerabilities.
• Advise development teams on secure coding practices throughout the SDLC.
• Leverage AI-assisted tooling to accelerate rule development and remediation guidance.
• Deliver engagements across the Northeast/Mid-Atlantic region, with occasional on-site work.

Skills

SAST tooling

CI/CD integration

Security automation

Scripting/automation

OWASP Top 10

AI tooling awareness

Communication skills

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security is seeking an Application Security Engineer to support the Northeast practice. You will implement, operate, and tune SAST tooling, integrate security into CI/CD pipelines, and advance secure development practices across the SDLC.

You will lead in automation, rule development, and remediation guidance while delivering client engagements in the Northeast/Mid-Atlantic region, with occasional on-site work.