GuidePoint SecurityRemote
Senior Application Security Engineer - Southeast region (Remote)
United States of America
Full Time
3 hours ago
No H1B
Key skills
Application SecurityAppSec Program DevelopmentSASTDASTSCAAPI SecuritySecrets ManagementSecure Development LifecycleVulnerability Triage and RemediationThreat ModelingArchitecture ReviewDevSecOpsSecurity CertificationsCloud Security - AWSCloud Security - AzureCloud Security - GCPContainer SecurityKubernetes SecurityAWSAzureGCPKubernetesCI/CDCommunication
About this role
GuidePoint Security is a rapidly growing cybersecurity company that provides trusted expertise and solutions to help organizations minimize risk. They are seeking a Senior Application Security Engineer to lead assessments, design security workflows, and work hands-on with clients to enhance their application security programs.
Responsibilities:
- Leading AppSec program assessments to evaluate current state, identify gaps, and help clients prioritize remediation efforts based on risk, resources, and organizational readiness
- Designing pragmatic security workflows, processes, tooling integrations, and developer friendly practices that engineering teams will actually adopt
- Getting hands-on when needed: implementing SAST/SCA/DAST/API tooling, configuring CI/CD security gates, building threat models, and conducting architecture reviews
- Navigating organizational complexity by helping clients work through the messy middle: tool sprawl, low adoption rates, competing priorities, technical debt, and cross-functional alignment challenges
- Delivering polished client work, producing clear assessments, actionable roadmaps, implementation guides, and executive communications that drive decision-making
- Serving as a strategic advisor and hands-on partner, adapting your approach to each client’s culture, maturity, and goals
Requirements:
- 5+ years in application security, with demonstrated experience building, scaling, or leading an AppSec program
- Proficiency with the implementation, operationalization, and troubleshooting of tools across the AppSec landscape (SAST, DAST, SCA, API Security, secrets management)
- Comfortable operating at the strategic level (program design, roadmaps, risk prioritization) and the tactical level (hands-on implementation, tool configuration, code review)
- Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools
- Excellent written and verbal communication skills (you can translate technical findings into business risk for executives, and explain security requirements to developers)
- Prior consulting or client-facing experience, scoping engagements, managing expectations and delivering clean work
- Operational DevSecOps experience
- Security certifications (CSSLP, OSCP, GWAPT, or similar)
- Experience with cloud-native security (AWS, Azure, GCP) and container/Kubernetes security