Remote Application Security Engineer - Southeast DevSecOps

GuidePoint Security; United States; Remote; USD 130,000 - 195,000; Full time

Benefits offered by this job

Remote work options

Group medical insurance

Paid holidays and flexible PTO

Internet allowance

Retirement plan eligibility

Pet benefit option

Job summary

GuidePoint Security is seeking an experienced Application Security Engineer to support the Southeast Application Security practice, focusing on the implementation, operationalization, and tuning of SAST tooling within client environments and the integration of security controls into CI/CD pipelines. The role requires strong software engineering, security automation, and client communication skills.

You will develop automated testing capabilities, create custom detection rules, and provide

Qualifications

• Proficiency with implementing, operationalizing, and troubleshooting SAST tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode)
• Understanding of CI/CD pipeline tools and processes (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI)
• Experience in software engineering, including modern technologies and architectures
• Strong scripting and automation using one or more programming languages
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC practices
• Willingness to adopt AI tools to improve security workflows

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments
• Design and integrate automated security testing into CI/CD pipelines
• Author and adapt custom SAST rules and triage, validate, and guide remediation of vulnerabilities
• Advise client development teams on OWASP Top 10, threat modeling, and secure coding practices throughout the SDLC
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the AppSec practice
• Deliver engagements for clients across the Northeast/Mid-Atlantic region, with occasional on-site presence as needed

Skills

Scripting & automation

CI/CD understanding

Communication skills

AI tooling awareness

Security fundamentals

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security is seeking an experienced Application Security Engineer to support the Southeast Application Security practice, focusing on the implementation, operationalization, and tuning of SAST tooling within client environments and the integration of security controls into CI/CD pipelines. The role requires strong software engineering, security automation, and client communication skills.

You will develop automated testing capabilities, create custom detection rules, and provide