Remote Application Security Engineer – SAST & CI/CD

guidepointsecurity; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group medical insurance (PPO/HSA)

Group dental insurance

12 corporate holidays

Flexible time off

Mobile phone and home internet stipend

Job summary

GuidePoint Security is seeking an Application Security Engineer to support a regional AppSec practice, helping clients secure how they build and deliver software. The role focuses on deploying and tuning tooling, embedding security testing into pipelines, and advising engineering teams on secure development practices, with up to 10% travel.

You will work in a consultative, client-facing capacity, deploying SAST platforms across client environments and contributing to reusable patterns for the

Qualifications

• Experience implementing, operating, and troubleshooting SAST tools across major vendors.
• Solid understanding of CI/CD pipelines and build/deploy automation.
• Software engineering background, ideally full stack, with security tooling experience.
• Prior work as an application security practitioner or software engineer.

Responsibilities

• Deploy, operationalize, and troubleshoot SAST platforms in client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules; triage and guide remediation of vulnerabilities.
• Advise client development teams on OWASP Top 10, threat modeling, and secure coding across the SDLC.
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance.
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the broader AppSec practice.

Skills

SAST tooling

CI/CD pipelines

Full stack software engineering

Secure development processes

AppSec experience

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security is seeking an Application Security Engineer to support a regional AppSec practice, helping clients secure how they build and deliver software. The role focuses on deploying and tuning tooling, embedding security testing into pipelines, and advising engineering teams on secure development practices, with up to 10% travel.

You will work in a consultative, client-facing capacity, deploying SAST platforms across client environments and contributing to reusable patterns for the