Remote AppSec Engineer | CI/CD Security & SAST

GuidePoint Security LLC; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote workforce

Group medical insurance

Group dental insurance

12 corporate holidays

Flexible time off

Phone and internet allowance

Retirement plan

Pet benefit option

Job summary

GuidePoint Security is seeking an experienced Application Security Engineer to support the Northeast practice, implementing and tuning SAST tooling and integrating security controls into CI/CD pipelines. You will craft automated security testing capabilities, develop custom rules, and promote secure development across the SDLC while delivering high-value engagements for clients.

The role requires strong software engineering, security automation, and client-facing communication skills, with a

Qualifications

• Proficiency with the implementation, operationalization, and troubleshooting of Static Application Security Testing (SAST) tooling (e.g., Semgrep, Snyk, CodeQL, Checkmarx, Veracode).
• Understanding of CI/CD pipelines and related tooling (e.g., GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Experience in software engineering, including modern tech stacks and architectures.
• Strong scripting/automation experience.
• Solid knowledge of OWASP Top 10, threat modeling, and secure coding in SDLC.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms within client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules and guide remediation of vulnerabilities.
• Advise on OWASP Top 10, threat modeling, and secure coding across SDLC.
• Leverage AI-assisted tooling to accelerate rule development and triage.
• Develop reusable pipeline patterns and rule libraries for AppSec practice.
• Deliver engagements across the Northeast/Mid-Atlantic with occasional on-site presence.

Skills

SAST tooling

CI/CD pipelines

Software engineering

Scripting/Automation

OWASP Top 10

Threat modeling

AI tools

Communication skills

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security is seeking an experienced Application Security Engineer to support the Northeast practice, implementing and tuning SAST tooling and integrating security controls into CI/CD pipelines. You will craft automated security testing capabilities, develop custom rules, and promote secure development across the SDLC while delivering high-value engagements for clients.

The role requires strong software engineering, security automation, and client-facing communication skills, with a