Application Security Engineer (Remote in the U.S.)

About this role

GuidePoint Security seeks an Application Security Engineer to operate and integrate security testing tools into client development pipelines, analyze findings, and guide remediation efforts. This remote U.S. role involves managing SAST, DAST, and SCA tools while collaborating with development teams to strengthen application security posture.

What you'll do

• Execute and analyze results from SAST, DAST, and SCA security scanning tools
• Integrate application security tools into CI/CD pipelines and ticketing systems
• Provide secure design guidance and vulnerability remediation strategies to development teams
• Configure, tune, and automate application security tooling
• Review source code across multiple programming languages for security issues
• Maintain and operate security tools including troubleshooting and optimization

What they're looking for

• Application security tools (Checkmarx, Veracode, Snyk, Invicti, Semgrep, Blackduck)
• Manual testing with Burp Suite Pro
• CI/CD pipeline integration and configuration
• Source code review in JavaScript, Python, Java, C++, PHP, or C#
• IDE and CI/CD platform experience (Azure DevOps, Jenkins, Bamboo)
• Secure development lifecycle practices
• Web application security principles
• Vulnerability remediation and mitigation

Benefits

• Remote work (U.S. based)
• Medical insurance with 90% employee premium coverage (PPO) or 100% coverage (HDHP)
• Dental insurance with 100% employee premium coverage
• Flexible time off and 12 corporate holidays
• Mobile phone and home internet allowance
• Retirement plan eligibility after 2 months