Application Security Engineer (Remote in the U.S.)
GuidePoint Security14 hours ago
Remote, WorldwideMid Level
H1B Sponsor
Responsibilities
- Run client SAST, DAST, and SCA tools and review their outputs.
- Provide secure design guidance and remediation strategies to developers.
- Integrate application security tools into development pipelines, ticketing systems, and development workflows.
- Manage, maintain, configure, tune, and automate application security tooling.
- Perform manual application security testing and help mitigate vulnerabilities.
- Review source code and remediate vulnerabilities identified by web application scanning tools.
Requirements
- At least 3 years of experience in an application security-focused position.
- Experience with multiple SAST, DAST, and SCA tools, such as Checkmarx, Veracode, Snyk, Invicti, Semgrep, and Black Duck.
- Experience with manual testing tools such as Burp Suite Pro.
- Experience integrating security tools into development pipelines.
- Understanding of application security vulnerabilities, web application security principles, and secure development practices.
- Experience reviewing source code written in JavaScript, Python, Java, C++, PHP, or C#.
- Experience with IDEs and CI/CD pipeline tools and processes, such as Azure DevOps, Jenkins, and Bamboo.
- Experience with information systems architecture, security control design, and software development.
- Prior software development experience is preferred.
- Willingness to use emerging technologies, including AI tools, to improve problem-solving and business outcomes.
Benefits
- Primarily remote work within the U.S.; some travel may be required, and on-site work may be required for federal positions.
- Medical insurance options including a zero-deductible PPO and a high-deductible health plan with HSA.
- Dental insurance with premiums covered at 100% for employees and 75% for family plans.
- 12 corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Tech Stack
Categories
About GuidePoint Security
GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make informed decisions and minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled 40% of Fortune 500 companies and more than half of U.S. government cabinet-level agencies to improve their security posture.