Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
GuidePoint Security · Remote: VA, MD, PA, NC, DE, NJ or DC
About the role
An application security engineer for GuidePoint Security's Mid-Atlantic region whose posting centres on deploying, running and troubleshooting static analysis tools such as Semgrep, Snyk, CodeQL, Checkmarx and Veracode, and wiring security into CI/CD systems like GitHub Actions, GitLab, Azure DevOps and Jenkins.
GuidePoint wants five to seven years of security engineering, a software development background (full stack ideally), solid scripting, and a firm grasp of the OWASP Top 10, threat modelling and secure coding. Writing custom Semgrep or CodeQL rules, DAST, IAST, SCA and API security tools, and Burp Suite are pluses. US work authorisation is required, with no visa sponsorship.