Skip to content
Updated How AI-exposed are the skills employers are hiring for? See the data →

From the employer's careers site First seen 24 Oct 2026 · Still live on 31 Oct 2026

Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)

GuidePoint Security Remote senior full-time

The employer hasn't listed a salary.

Apply on GuidePoint Security

Description

GuidePoint Security is seeking an Application Security Engineer to join their team remotely in the Mid-Atlantic region.

As an Application Security Engineer, you will play a critical role in helping GuidePoint Security's clients make better decisions and minimise risk. You will be responsible for implementing, operationalising, and troubleshooting Static Application Security Testing (SAST) tools, understanding Continuous Integration / Continuous Delivery (CI/CD) pipeline tools and processes, and having strong scripting and automation experience.

Responsibilities:

  • Implement, operationalise, and troubleshoot SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, Veracode, etc.
  • Understand CI/CD pipeline tools and processes, including GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, etc.
  • Have experience in software engineering, ideally full stack software development, including modern technologies and application architectures
  • Strong scripting and automation experience using one or more programming languages
  • Solid working knowledge of application security fundamentals, including the OWASP Top 10, threat modelling, and implementing secure coding practices throughout the Software Development Lifecycle (SDLC)

Preferred qualifications:

  • Experience writing or adapting custom SAST rules (Semgrep or CodeQL)
  • Familiarity with additional Application Security tools, such as Interactive (IAST), Dynamic (DAST) and API security, SCA, etc.
  • Familiarity with API Security tools, such as NoName, Traceable, Salt, Cequence
  • Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite
  • Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools

Benefits:

  • Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
  • Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
  • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
  • 12 corporate holidays and a Flexible Time Off (FTO) program
  • Healthy mobile phone and home internet allowance
  • Eligibility for retirement plan after 2 months at open enrollment
  • Pet Benefit Option

Skills

Required

  • Static Application Security Testing (SAST)
  • Continuous Integration / Continuous Delivery (CI/CD)
  • Software engineering
  • Scripting and automation
  • Application security fundamentals
  • OWASP Top 10
  • Threat modelling
  • Secure coding practices

Nice to have

  • Custom SAST rules
  • Interactive (IAST)
  • Dynamic (DAST)
  • API security
  • SCA
  • Burp Suite
  • Secure Development Lifecycles

Ready to apply?

You apply with the employer directly. Their original posting is here: https://job-boards.greenhouse.io/guidepointsecurity/jobs/6094965004

Apply on GuidePoint Security