Remote Application Security Engineer — SAST & SDLC

GuidePoint Security LLC; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Flexible Time Off

Phone/internet allowance

Retirement plan

Pet benefit

Job summary

GuidePoint Security LLC is seeking a security engineer to implement and operationalize SAST tooling, integrate security into CI/CD pipelines, and promote secure coding practices throughout the development lifecycle.

The role emphasizes hands-on tooling, collaboration with software teams, and staying current with emerging security technologies, including AI tools for smarter problem solving.

Qualifications

• Proficiency with SAST tool implementation, operations and troubleshooting.
• Familiarity with CI/CD pipelines and related tools (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Experience in software engineering, ideally full stack development, with modern tech stacks.
• Strong scripting/automation skills in at least one language.
• Solid knowledge of OWASP Top 10, threat modeling and secure SDLC practices.

Responsibilities

• Implement and operationalize SAST tools across projects.
• Troubleshoot and optimize security tooling within CI/CD pipelines.
• Collaborate with engineering teams to integrate secure coding practices.

Skills

SAST tooling

CI/CD pipelines

Full stack development

Scripting/automation

Secure SDLC

AI awareness

Strong communication

Burp Suite

Education

Bachelor's degree

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

Job description

GuidePoint Security LLC is seeking a security engineer to implement and operationalize SAST tooling, integrate security into CI/CD pipelines, and promote secure coding practices throughout the development lifecycle.

The role emphasizes hands-on tooling, collaboration with software teams, and staying current with emerging security technologies, including AI tools for smarter problem solving.