Remote AppSec Engineer – North Central Region

GuidePoint Security, LLC; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote work

Medical insurance

12 corporate holidays and flexible PTO

Phone/home internet allowance

Retirement plan eligibility

Pet benefit option

Résumé du poste

GuidePoint Security, LLC is seeking an Application Security Engineer to support its North Central practice. You will develop SSDLC programs, integrate DevSecOps pipelines, and perform security assessments of AI-enabled applications, delivering Wow Them service to clients and internal teams.

You will lead security testing efforts across SAST/DAST/SCA, contribute to secure coding guidance, and help mature AppSec programs by defining metrics and roadmaps aligned to industry frameworks.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 1–3+ years of Application Security, DevSecOps, or security-focused software development.
• Hands-on with SAST, DAST, SCA and CI/CD integration.
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10 and mitigation strategies.
• Experience with secure development lifecycles and remediation guidance.
• Ability to review source code in languages such as JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++.
• Working knowledge of cloud platforms and containerization.
• Excellent written and verbal communication for technical and executive audiences.

Responsabilités

• Run and tune client SAST, DAST, SCA, secrets, and IaC scanning tools; triage results and deliver prioritized remediation guidance.
• Design and implement security tool integrations into CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with policy gates.
• Partner with development teams on remediation and secure coding guidance to embed security in the SDLC.
• Assess and harden software supply chain controls, including SBOM generation, dependency and container image scanning, and artifact signing.
• Perform threat modeling and security architecture reviews for cloud-native and IaC environments.
• Leverage AI-assisted tooling to accelerate testing, triage, and remediation and advise clients on AI security adoption.
• Produce client-ready deliverables and contribute to the growth of the AppSec practice through tooling and knowledge sharing.

Connaissances

SAST

DAST

SCA

CI/CD

OWASP Top 10

Cloud platforms

Python

JavaScript/TypeScript

Threat modeling

Security architecture

Formation

Bachelor's degree in CS or related field

Outils

GitHub Actions

Azure DevOps

GitLab CI

Jenkins

Burp Suite Pro

Checkmarx

Description du poste

GuidePoint Security, LLC is seeking an Application Security Engineer to support its North Central practice. You will develop SSDLC programs, integrate DevSecOps pipelines, and perform security assessments of AI-enabled applications, delivering Wow Them service to clients and internal teams.

You will lead security testing efforts across SAST/DAST/SCA, contribute to secure coding guidance, and help mature AppSec programs by defining metrics and roadmaps aligned to industry frameworks.