Remote AppSec Engineer, Southeast | DevSecOps

GuidePoint Security, LLC; United States; Remote; USD 110,000 - 165,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Holidays & PTO

Phone & internet allowance

Retirement plan

Pet benefit

Job summary

GuidePoint Security is seeking a skilled Application Security Engineer to support the Southeast Application Security practice, delivering SAST tooling integration, CI/CD security, and adoption of secure development practices across the SDLC.

This role will engage in automating security testing capabilities, custom detection rules, and secure pipeline patterns while providing exceptional service to clients and internal teams.

Qualifications

• Must have hands-on experience implementing and troubleshooting SAST tooling (Semgrep, Snyk, CodeQL, Checkmarx, Veracode).
• Strong knowledge of CI/CD pipelines and tools (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Background in software engineering with modern tech stacks and architectures.
• Solid scripting/automation skills in one or more languages.
• Solid understanding of OWASP Top 10 and secure SDLC practices.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms in client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author and adapt custom SAST rules and guide remediation of vulnerabilities.
• Advise client teams on secure coding practices and threat modeling.
• Leverage AI-assisted tooling to accelerate rule development and triage.
• Contribute to reusable pipeline patterns and rule libraries.
• Deliver engagements across the Northeast/Mid-Atlantic with occasional on-site work.

Skills

CI/CD security

Security automation

Threat modeling

OWASP Top 10

Scripting/Automation

Communication skills

AI tooling familiarity

Education

Bachelor's degree in Computer Science or a related field

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Job description

GuidePoint Security is seeking a skilled Application Security Engineer to support the Southeast Application Security practice, delivering SAST tooling integration, CI/CD security, and adoption of secure development practices across the SDLC.

This role will engage in automating security testing capabilities, custom detection rules, and secure pipeline patterns while providing exceptional service to clients and internal teams.