Senior Application Security Engineer

🔥 5 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Support GuidePoint Security’s Application Security practice in the Southeast region • Develop secure software development lifecycle (SSDLC) programs • Integrate DevSecOps security tools and automation into CI/CD pipelines • Assess AI-enabled and agentic applications • Run and tune SAST, DAST, SCA, secrets, and IaC scanning tools; triage findings, eliminate false positives, and provide prioritized remediation guidance • Integrate security tools with CI/CD pipelines, source control, IDEs, and ticketing systems, including policy gates and break-the-build criteria • Partner with development teams on remediation, secure coding, and developer enablement • Assess and harden software supply chain controls, including SBOMs, dependency and container image scanning, artifact signing, and pipeline/runner security • Perform threat modeling and security architecture reviews for cloud-native, microservice, Docker/Kubernetes, and Terraform/CloudFormation environments • Use AI-assisted and agentic tooling to accelerate testing, triage, reporting, and auto-remediation • Advise clients on secure adoption of AI coding assistants • Define AppSec metrics, vulnerability-management SLAs, and maturity roadmaps aligned with OWASP SAMM, BSIMM, and NIST SSDF • Produce client-ready deliverables and present findings to technical and executive audiences • Contribute to AppSec practice growth through tooling, methodologies, and knowledge sharing • Provide client and internal-customer service and lead by influence

🎯 Requirements

• 4–8+ years of experience in Application Security, Web Penetration Testing, DevSecOps, or agentic software development with a security focus • Embraces emerging technologies, including AI tools • Proficiency with manual testing tools such as Burp Suite Pro • Strong understanding of the OWASP Top 10 and OWASP API Security Top 10 and mitigation strategies • Strong working knowledge of secure development lifecycles and vulnerability remediation • Ability to review source code in one or more of JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++ • Working knowledge of AWS, Azure, or GCP, containers, and Git-based development workflows • Strong written and verbal communication skills • Preferred: experience building agentic AI workflows or automation using Python, Bash, or PowerShell • Preferred: software supply chain security experience with SBOM, SLSA, or Sigstore • Preferred: IaC/container security scanning experience with Checkov, Trivy, or Wiz • Preferred: threat modeling methodologies such as STRIDE and AppSec maturity frameworks including OWASP SAMM, BSIMM, or NIST SSDF • Preferred: industry certifications such as GWAPT, OSWE, OSCP, CSSLP, Certified DevSecOps Professional (CDP), or AWS Certified Security – Specialty • Preferred: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience • Applicants must be authorized to work for any employer in the U.S.; employment visa sponsorship is unavailable • Must meet sedentary-work, prolonged wrist/hand/finger movement, and close-visual-acuity requirements

🏖️ Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) • Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of employees' premiums and 75% for family plans) • HSA contributions of $850 per employee annually or $1750 per family annually, paid in 4 equal quarterly installments • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Up to 10% travel

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume