Application Security Engineer - Northeast region
GuidePoint Security · Northeast
About the role
An application security engineer in GuidePoint Security's Northeast practice, which helps clients secure how they build and ship software. The engineer stands up and troubleshoots SAST platforms such as Semgrep, Snyk, CodeQL and Checkmarx in client environments, adds automatic security checks to build pipelines, writes custom Semgrep and CodeQL rules, triages findings and guides fixes, coaches developers on secure coding and threat modelling, and adds to the practice's reusable pipeline patterns and rule libraries.
GuidePoint wants SAST implementation experience, CI/CD knowledge, a software development background, strong scripting and solid AppSec fundamentals; Burp Suite and DAST, SCA or API security tools help. Occasional client site visits, travel up to 10 percent, and no visa sponsorship.