Remote AppSec Engineer - CI/CD & Secure SDLC

RiseMe; United States; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote workforce primarily

Group Medical Insurance options

Dental Insurance

Holidays & Flexible Time Off

Mobile phone & internet allowance

Retirement plan eligibility

Pet Benefit Option

Job summary

GuidePoint Security seeks an experienced Application Security Engineer to support the Northeast practice, implementing and optimizing SAST tooling, integrating security into CI/CD, and advancing secure development across the SDLC. You will develop automated security testing capabilities and reusable pipeline patterns.

You will engage with client development teams, lead by influence, and apply AI-assisted tooling to improve security outcomes while balancing business priorities and delivery

Qualifications

• Proficient in implementing, operating, and troubleshooting SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, Veracode.
• Understanding of CI/CD pipelines and related tooling (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Software engineering background with modern tech stacks and architectures.
• Strong scripting/automation experience in one or more languages.
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC practices.
• Eager to adopt AI tools to enhance security tooling and workflows.
• Excellent written and verbal communication skills.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules and guide remediation of vulnerabilities.
• Advise client dev teams on secure coding practices and threat modeling.
• Leverage AI-assisted tooling to accelerate rule development and triage.
• Contribute to reusable pipeline patterns and rule libraries for the AppSec practice.
• Deliver engagements across the Northeast/Mid-Atlantic, with occasional on-site as needed.

Skills

SAST tooling

CI/CD integration

Security automation

DevSecOps

Threat modeling

OWASP Top 10

Education

Bachelor's degree in CS or related

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

Job description

GuidePoint Security seeks an experienced Application Security Engineer to support the Northeast practice, implementing and optimizing SAST tooling, integrating security into CI/CD, and advancing secure development across the SDLC. You will develop automated security testing capabilities and reusable pipeline patterns.

You will engage with client development teams, lead by influence, and apply AI-assisted tooling to improve security outcomes while balancing business priorities and delivery