Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $82k - $118k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guild Mortgage

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1960

🏗️ Construction

💸 Finance

🏠 Real Estate

Construction • Finance • Real Estate

Guild Mortgage is a U. S. -based mortgage lender and loan servicer that provides a wide range of home financing products and services to consumers and business partners. The company offers purchase and refinance mortgages, including conventional, FHA, VA, USDA, jumbo, renovation, construction, reverse mortgages, HELOCs, and specialty programs and down-payment assistance. Guild Mortgage operates nationwide through local branches and loan officers, supports borrowers with servicing and online account management, and partners with builders, real estate agents, title agents, and correspondents.

📋 Description

• Apply and help maintain secure development practices, including code review and security testing integrated into CI/CD pipelines • Identify, validate, and triage application vulnerabilities through automated and manual testing • Help development teams adopt secure coding practices and remediate findings through Shift Left initiatives • Support the Security Champions program, including training delivery and day-to-day questions • Assist developers with vulnerability reproduction, risk analysis, and remediation guidance • Escalate complex or high-risk issues to the Senior Application Security Engineer • Operate, tune, and maintain Application Security program tools, including open-source solutions • Collaborate with product, engineering, DevOps, and compliance teams to integrate security requirements into application design • Assist incident response teams in investigating and remediating application-related security incidents • Participate in threat modeling exercises and security design reviews • Perform recurring security testing and vulnerability assessments; maintain security control documentation and evidence • Apply secure design patterns to AI-enabled applications, including LLM integrations, RAG pipelines, and agentic workflows • Implement, configure, test, and monitor AI guardrails, including prompt injection defenses, input/output filtering and validation, least-privilege scoping, and data loss prevention • Execute AI/LLM red-team tests covering prompt injection, jailbreaks, sensitive data disclosure, insecure output handling, and excessive agency • Document AI security findings and remediation guidance using OWASP Top 10 for LLM Applications and MITRE ATLAS • Support security reviews of new AI use cases and third-party AI features, including controls over nonpublic personal information • Help enforce secure usage standards for AI coding assistants, including human review and scanning of AI-generated code • Stay informed about emerging application and AI security threats and support compliance and security awareness initiatives

🎯 Requirements

• Bachelor's degree in Computer Science, Software Engineering, Cyber Security or equivalent, preferred • A combination of education and experience may be considered in lieu of the Bachelor’s degree • Minimum three years' experience as a software developer or similar experience • Preferred qualifications: Burp Suite Certified Practitioner, Hack the Box Certified Web Exploitation Specialist (HTB CWES), Practical Web Pentest Professional (PWPP) • Ability to organize and manage multiple priorities simultaneously • Ability to work well independently or within a team • Ability to handle confidential matters with discretion • Excellent interpersonal communication skills • Excellent verbal and written communication skills • Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment • Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications • Ability to learn new tasks, remember processes, maintain focus, complete tasks independently, and make timely decisions • Ability to operate standard office equipment and keyboards • Ability to accurately perceive, distinguish, and interpret visual and audio information • Availability to work primarily Monday–Friday during the business week • Travel of 5% or less

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • AD&D insurance • LTD insurance • 401(k) with employer match • Competitive compensation • Pleasant work environment • Remote work from home