Remote App Security Engineer | DevSecOps & AI Security

GuidePoint Security LLC; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work (US-based)

Group Medical Insurance

Group Dental Insurance

12 corporate holidays

Mobile phone & home internet allowance

Retirement plan eligibility

Pet Benefit

Job summary

GuidePoint Security LLC is seeking an Application Security Engineer to support the North Central practice, focusing on SSDLC, DevSecOps integrations, and security assessments for AI-enabled applications. You will lead secure coding guidance, remediation, and security tooling within CI/CD pipelines.

The role emphasizes threat modeling, software supply chain security, and collaboration with client engineering and security teams to reduce risk while maintaining delivery velocity.

Qualifications

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a security focus.
• Embraces emerging technologies, including AI tools, to work smarter and drive better outcomes.
• Hands-on experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.
• Proficiency with manual testing tools such as Burp Suite Pro and understanding of OWASP Top 10 APIs.
• Ability to review source code in languages such as JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++.
• Working knowledge of cloud platforms (AWS, Azure, or GCP), containers, and Git-based workflows.
• Strong written and verbal communication skills for technical and executive audiences.

Responsibilities

• Run and tune client SAST, DAST, SCA, secrets, and IaC scanning tools; triage results and deliver remediation guidance.
• Design and implement security tool integrations into CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) and ticketing systems (Jira, ServiceNow).
• Partner with development teams on remediation and secure coding guidance.
• Assess and harden software supply chain controls and pipeline security (SBOM, artifact signing, SLSA).
• Perform threat modeling and security architecture reviews for cloud-native and container environments.
• Leverage AI-assisted tooling to accelerate testing and reporting and advise on AI coding assistants.

Skills

SAST

DAST

SCA

CI/CD

Burp Suite Pro

OWASP Top 10

Secure SDLC

JavaScript/TypeScript

Python

Cloud platforms

Containers

Git workflows

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Burp Suite Pro

Invicti

Checkmarx

Snyk

Veracode

Job description

GuidePoint Security LLC is seeking an Application Security Engineer to support the North Central practice, focusing on SSDLC, DevSecOps integrations, and security assessments for AI-enabled applications. You will lead secure coding guidance, remediation, and security tooling within CI/CD pipelines.

The role emphasizes threat modeling, software supply chain security, and collaboration with client engineering and security teams to reduce risk while maintaining delivery velocity.