Application Security Engineer

GuidePoint Security

. Support the Southeast Application Security practice in delivering application security engineering services to clients .

Posted 10/6/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security Engineering, focusing on SAST, CI/CD integration, and secure coding practices. Proficient in leveraging AI tools and assessing secure development lifecycle maturity against industry standards.

Highest-signal resume keywords

SAST Tool ImplementationCI/CD Pipeline IntegrationApplication Security FundamentalsScripting and AutomationOWASP Top 10 Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTSCADASTSemgrepSnykCodeQLCheckmarxVeracodeSoftware EngineeringThreat Modeling

Soft Skills

Excellent Communication Skills

Tools & Technologies

GitHub ActionsGitLab RunnersAzure DevOpsJenkinsCircleCI

Industry Keywords

OWASP SAMMNIST SSDFSecure Coding PracticesSoftware Supply ChainSLSASBOM

Tech Stack

Tools & technologies

AzureJenkinsSDLC

About the role

Key responsibilities & impact

Support the Southeast Application Security practice in delivering application security engineering services to clients
Implement, operationalize, and troubleshoot SAST platforms within client environments
Design and integrate automated security testing into CI/CD pipelines
Author and adapt custom SAST rules and triage, validate, and guide remediation of vulnerabilities
Advise development teams on OWASP Top 10, threat modeling, and secure coding practices throughout the SDLC
Leverage AI-assisted tooling for rule development, triage, and remediation guidance
Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators
Deliver client engagements across the Northeast/Mid-Atlantic region, with occasional on-site presence as needed
Assess secure development lifecycle maturity against NIST SSDF and OWASP SAMM
Review software supply chain practices against SLSA and SBOM guidance
Deploy and tune SAST, SCA, and DAST tooling
Partner with client development, platform engineering, and application security leadership to reduce scanner noise and integrate security without slowing releases

Requirements

What you’ll need

Proficiency with implementation, operationalization, and troubleshooting of SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, and Veracode
Understanding of CI/CD pipeline tools and processes, including GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, and CircleCI
Experience in software engineering, ideally full stack software development, including modern technologies and application architectures
Strong scripting and automation experience using one or more programming languages
Solid working knowledge of application security fundamentals, including OWASP Top 10, threat modeling, and secure coding practices throughout the SDLC
Embraces emerging technologies, including AI tools
Excellent written and verbal communication skills
Up to 10% travel
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
U.S.-based work authorization/location requirement stated as 'U.S. based only'

Benefits

Comp & perks

Remote workforce primarily (U.S. based only)
Group Medical Insurance options: Zero Deductible PPO Plan; GuidePoint pays 90% of the premium for employees and 70% for family plans, or High Deductible Health Plan with HSA; GuidePoint pays 100% of employees' premiums and 75% for family plans
HSA contributions of $850 annually per employee or $1,750 annually per family
Group Dental Insurance; GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays
Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
Mentorship and guidance opportunities