Application Security Consultant- Remote (Anywhere in the U.S.)
GuidePoint Security · Remote, US
About the role
A consultant in GuidePoint Security's Application Security Practice who carries out hands-on assessments for clients: web, mobile and thick-client testing, source code review, threat modelling and architecture reviews, with a growing focus on attacking LLM and agentic applications through prompt injection, guardrail bypass, tool-calling abuse and RAG poisoning. The consultant writes findings for technical and management readers, builds AI-driven testing tools and agents, and contributes research, talks and blog posts.
GuidePoint wants at least two years of application security assessment and one year in enterprise consulting, tools such as Burp Suite and sqlmap, code review in common languages, and practical AI application testing experience. Travel is up to 20 percent.