Application Security Engineer

About the Company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,200 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Requirements

• 5-7 years of security engineering experience in the Information Security industry
• Proficiency with SAST tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode, etc.)
• Understanding of CI/CD pipeline tools (GitHub Actions, GitLab, Azure DevOps, Jenkins, etc.)
• Experience in software engineering or full stack development
• Strong scripting and automation experience
• Solid knowledge of OWASP Top 10, threat modeling, and secure SDLC
• Bachelor’s degree in a relevant discipline or equivalent experience

Preferred Qualifications

• Experience writing or adapting custom SAST rules (Semgrep or CodeQL)
• Familiarity with IAST, DAST, SCA, and API security tools
• Practical experience validating vulnerabilities with Burp Suite
• Experience building and operating security tools within CI/CD pipelines

Benefits

• Group Medical Insurance (PPO or HDHP with HSA)
• Group Dental Insurance
• 12 corporate holidays and Flexible Time Off (FTO)
• Mobile phone and home internet allowance
• Retirement plan eligibility
• Pet Benefit Option