Remote AppSec Engineer – DevSecOps & AI Security

GuidePoint Security LLC; Oregon; Híbrido; USD 110.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work majority

Medical insurance

Dental insurance

14+ holidays

Internet allowance

Retirement plan

Pet benefits

Descripción de la vacante

GuidePoint Security LLC is seeking an experienced Application Security Engineer to support our North Central practice. The role focuses on SSDLC programs, DevSecOps automation, and security assessments of AI-enabled applications.

You will run SAST/DAST/SCA assessments, integrate tools into CI/CD pipelines, and guide development teams in secure coding practices. Travel up to 10% may be required for client engagements.

Formación

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a security focus.
• Hands-on experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines (e.g., Azure DevOps, GitHub Actions, GitLab CI, Jenkins).
• Proficiency with Burp Suite Pro and knowledge of OWASP Top 10 & API Security Top 10 and mitigations.
• Ability to review source code in JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++.
• Strong communication skills for technical and executive audiences.

Responsabilidades

• Run and tune client SAST, DAST, SCA, secrets, and IaC scanning tools; triage results and provide remediation guidance.
• Design and implement security tool integrations into CI/CD pipelines and ticketing systems.
• Partner with development teams on remediation and secure coding guidance to embed security in SDLC.
• Perform threat modeling and security architecture reviews for cloud-native and container environments.
• Produce client-ready deliverables and contribute to AppSec practice growth.

Conocimientos

Application Security

DevSecOps

Threat modeling

Secure coding guidance

Security testing

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

SAST tools

DAST tools

SCA tools

GitHub Actions

Azure DevOps

Jenkins

Burp Suite Pro

Descripción del empleo

GuidePoint Security LLC is seeking an experienced Application Security Engineer to support our North Central practice. The role focuses on SSDLC programs, DevSecOps automation, and security assessments of AI-enabled applications.

You will run SAST/DAST/SCA assessments, integrate tools into CI/CD pipelines, and guide development teams in secure coding practices. Travel up to 10% may be required for client engagements.