Application Security Engineer - North Central region
GuidePoint Security · North Central
About the role
An application security engineer in GuidePoint Security's North Central practice, helping clients build and mature secure development programs. Client work covers running and tuning SAST, DAST, SCA, secrets and IaC scanners and cutting false positives, building scanner integrations and policy gates into CI/CD and ticketing, hardening the software supply chain, threat modelling cloud-native and container environments, assessing AI-enabled and agentic apps, and defining AppSec metrics and roadmaps against OWASP SAMM, BSIMM and NIST SSDF.
GuidePoint wants one to three or more years in AppSec, DevSecOps or security-minded development, Burp Suite Pro, code review in at least one language, and cloud and container familiarity. Invicti and Checkmarx experience is especially welcome. Travel is up to 10 percent; no visa sponsorship.