Remote AppSec Engineer — Southeast DevSecOps

GuidePoint Security LLC; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Competitive benefits

Flexible time off

Travel opportunities (up to 10%)

Professional development

Job summary

GuidePoint Security LLC is seeking an Application Security Engineer to support the Southeast practice, delivering SAST tooling and secure CI/CD integration across client environments. You will help build automated testing capabilities, craft custom detection rules, and promote secure development practices.

You will lead by influence, engage on client communications, and advance DevSecOps initiatives, aligning with business objectives while leveraging evolving AI tools and secure code adoption

Qualifications

• Proficiency with implementing and troubleshooting SAST tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode).
• Understanding of CI/CD security and tooling (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI).
• Background in software engineering with modern technologies and architectures.
• Strong scripting/automation skills in one or more languages.
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC practices.
• Experience applying AI tools to security testing and tooling workflows.
• Excellent written and verbal communication for client interactions.

Responsibilities

• Implement, operationalize, and troubleshoot SAST platforms in client environments.
• Design and integrate automated security testing into CI/CD pipelines.
• Author/adapt custom SAST rules and guide remediation of findings.
• Advise on OWASP Top 10, threat modeling, and secure coding across SDLC.
• Leverage AI-assisted tooling to accelerate rule development and triage.
• Contribute to reusable pipeline patterns, rule libraries, and accelerators.
• Deliver engagements across the Northeast/Mid-Atlantic with occasional on-site work.

Skills

SAST tooling

CI/CD security

Software engineering

Automation scripting

OWASP Top 10

Security automation

AI tooling

Client communication

Tools

Semgrep

Snyk

CodeQL

Checkmarx

Veracode

GitHub Actions

GitLab Runners

Azure DevOps

Jenkins

CircleCI

Burp Suite

Job description

GuidePoint Security LLC is seeking an Application Security Engineer to support the Southeast practice, delivering SAST tooling and secure CI/CD integration across client environments. You will help build automated testing capabilities, craft custom detection rules, and promote secure development practices.

You will lead by influence, engage on client communications, and advance DevSecOps initiatives, aligning with business objectives while leveraging evolving AI tools and secure code adoption