Remote AppSec Engineer - North Central

GuidePoint Security LLC; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote workforce (US-based)

Group health insurance options

Dental insurance

12 corporate holidays and Flexible PTO

Mobile phone and home internet stipend

Retirement plan eligibility after open

Pet Benefit Option

Résumé du poste

GuidePoint Security LLC is seeking an Application Security Engineer to advance SSDLC programs and DevSecOps integrations across CI/CD pipelines. You will conduct security assessments of AI-enabled applications and lead secure coding guidance for development teams.

Your role involves SAST/DAST/SCA, SBOM security, and threat modeling for cloud-native environments, with a focus on reducing risk and delivering client-ready insights.

Qualifications

• 1–3+ years in Application Security, DevSecOps, or secure software development
• Experience with AI tools and secure coding practices
• Experience integrating security in CI/CD pipelines with major tools

Responsabilités

• Run and tune SAST/DAST/SCA, triage results, reduce false positives, deliver remediation guidance
• Integrate security tooling into CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins)
• Collaborate with developers on remediation and secure coding guidance
• Assess and harden software supply chain controls (SBOMs, artifact signing, container security)
• Perform threat modeling and security reviews for cloud-native and container environments
• Leverage AI-assisted tooling to accelerate testing and reporting

Connaissances

SAST

DAST

SCA

CI/CD pipelines

Burp Suite Pro

OWASP Top 10

JavaScript/TypeScript

Python

Java

Formation

Bachelor's degree in Computer Science, Information Security, or related field

Outils

Invicti

Checkmarx

Snyk

Veracode

Black Duck

Semgrep

GitHub Advanced Security

Description du poste

GuidePoint Security LLC is seeking an Application Security Engineer to advance SSDLC programs and DevSecOps integrations across CI/CD pipelines. You will conduct security assessments of AI-enabled applications and lead secure coding guidance for development teams.

Your role involves SAST/DAST/SCA, SBOM security, and threat modeling for cloud-native environments, with a focus on reducing risk and delivering client-ready insights.