Application Security Engineer

GuidePoint Security

Completely RemoteFull TimeInformation Technology
Posted Today

Job description

Responsibilities

  • Run client SAST, DAST, and SCA tools, review outputs and provide recommendations
  • Implement integrations for tools into pipelines, ticketing systems, etc.
  • Collaborate with developers to provide secure design guidance and remediation strategies
  • Manage, maintain and operate application security tooling, including configuration, tuning, and automation

Requirements

  • 3+ years of experience in an Application Security focused position
  • Experience with SAST/DAST/SCA tools such as Checkmarx, Veracode, Snyk, Invicti, Semgrep, or Blackduck
  • Proficiency with manual testing tools like Burp Suite Pro
  • Experience reviewing source code in JavaScript, Python, Java, C++, PHP, or C#
  • Familiarity with CI/CD tools like GitHub, Azure DevOps, Jenkins, or Bamboo
  • Understanding of Secure Development Lifecycles and vulnerability remediation

Benefits

  • Remote workforce (U.S. based)
  • Group Medical Insurance options (PPO or HDHP with HSA)
  • Group Dental Insurance
  • 12 corporate holidays and Flexible Time Off (FTO)
  • Mobile phone and home internet allowance
  • Retirement plan eligibility
  • Pet Benefit Option

About the Company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since 2011, GuidePoint has grown to over 1,200 employees, serving as a trusted advisor to more than 6,200 customers.

Skills & tools

PythonJava

What the team is looking for

Use this list as a quick fit check before you apply.

  1. 013+ years Application Security experience
  2. 02SAST/DAST/SCA tool expertise
  3. 03Burp Suite Pro proficiency
  4. 04Code review skills (JS, Python, Java, C++, PHP, C#)
  5. 05CI/CD pipeline integration experience
ScoutJobsAd

Wake up to a shortlist, not a search results page.

ScoutJobs scores every new listing against your CV, salary floor and visa. A handful of real matches by morning.

Get your daily matches