G

GuidePoint Security

Cybersecurity consulting, software solutions, managed services

Application Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • Proficiency implementing, operationalizing, and troubleshooting Static Application Security Testing tools such as Semgrep, Snyk, CodeQL, Checkmarx, and Veracode.
  • Understanding of Continuous Integration/Continuous Delivery pipeline tools and processes such as GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, and CircleCI.
  • Experience in software engineering, ideally full-stack software development, including modern technologies and application architectures.
  • Strong scripting and automation experience using one or more programming languages.
  • Solid working knowledge of application security fundamentals, including the OWASP Top 10, threat modeling, and implementing secure coding practices throughout the Software Development Lifecycle.
  • Ability to use emerging technologies, including artificial intelligence tools, to solve problems and improve work outcomes.
  • Strong written and verbal communication skills.
  • Bachelor’s degree in a relevant discipline or equivalent experience.
  • Five to seven years of security engineering experience in the information security industry.
  • Must be authorized to work for any employer in the United States.

Desired Qualifications

  • Experience writing or adapting custom SAST rules using Semgrep or CodeQL.
  • Familiarity with additional application security tools, including Interactive Application Security Testing, Dynamic Application Security Testing, API security, and Software Composition Analysis.
  • Familiarity with API security tools such as NoName, Traceable, Salt, and Cequence.
  • Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite.
  • Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools.
  • Understanding of automated security testing approaches and tools.
  • Experience building and operating security tools within Continuous Integration/Continuous Delivery pipelines.
  • Experience proactively integrating security into the development process.
  • Past experience as an application security practitioner or software engineer.

About the Company

GuidePoint Security

Cybersecurity consulting, software solutions, managed services

GuidePoint Security delivers cybersecurity services to help organizations assess and reduce security risk, offering security technologies, consulting, and managed security services for enterprise and government clients. It works by assessing a client’s security posture, recommending and deploying appropriate tools and controls, and continuously monitoring and managing security operations to detect and respond to threats. The company stands out through deep industry knowledge and hands-on practitioner experience from DoD, intelligence communities, and Fortune 500 environments, enabling tailored solutions for complex, mission-critical needs rather than generic offerings. Its goal is to help clients make informed security decisions, reduce risk exposure, and maintain strong defense against evolving cyber threats through a combination of technology, expertise, and managed services.

Company size
1,001-5,000
Company stage
Growth Equity (Non-Venture Capital)
Total funding
Not listed
Headquarters
Reston, VA
Founded
2011

Recently Posted Jobs

Explore more opportunities at GuidePoint Security

See more jobs