RemoteLeaf Logo
Log in Sign up

Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)

3 months, 3 weeks ago
United States
Full-time
Senior
Application Security Engineer
Software Development
Azure Burp Suite CI/CD CircleCI GitHub Actions Jenkins
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 14

Description

  • Implement, operationalize, and troubleshoot SAST tools across application environments.
  • Work with CI/CD pipeline tools and processes to integrate security into delivery workflows.
  • Apply application security fundamentals, including OWASP Top 10, threat modeling, and secure coding practices across the SDLC.
  • Use scripting and automation to support security engineering tasks and improve efficiency.
  • Validate vulnerabilities and support remediation efforts for findings from application security tools.
  • Write or adapt custom SAST rules when needed.
  • Build and operate security tools within CI/CD pipelines.
  • Collaborate with development teams to proactively integrate security into the development process.
  • Communicate findings and recommendations clearly in written and verbal formats.

Requirements

  • Proficiency with SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, or Veracode.
  • Understanding of CI/CD pipeline tools and processes such as GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, or CircleCI.
  • Experience in software engineering, ideally full stack development, with modern technologies and application architectures.
  • Strong scripting and automation experience using one or more programming languages.
  • Working knowledge of application security fundamentals, including the OWASP Top 10, threat modeling, and secure coding practices.
  • Excellent written and verbal communication skills.
  • Experience writing or adapting custom SAST rules, especially in Semgrep or CodeQL, preferred.
  • Familiarity with additional application security tools such as IAST, DAST, API security, and SCA, preferred.
  • Familiarity with API security tools such as NoName, Traceable, Salt, or Cequence, preferred.
  • Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite, preferred.
  • Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities from web application scanning tools, preferred.
  • Experience with automated security testing approaches and building security tools into CI/CD pipelines, preferred.
  • Past experience as an application security practitioner or software engineer, preferred.
  • Bachelor’s degree in a relevant discipline or equivalent experience.
  • 5-7 years of security engineering experience in the Information Security industry.

Benefits

  • Remote workforce primarily, with U.S.-based work and some travel or onsite requirements for certain roles.
  • Group medical insurance options with substantial employer premium contributions.
  • Group dental insurance with 100% employee premium coverage and 75% coverage for family plans.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Eligibility for a retirement plan after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Very Good Security

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

United States Canada Full-time Mid Level Application Security Engineer
$175k-$230k
AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
17 hours, 36 minutes ago
Harness.io

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

United States Full-time Senior Application Security Engineer
$150k-$200k
AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
18 hours, 21 minutes ago
Gomining

Product Security Engineer

Gomining 11-50 Construction & Engineering

Product Security Engineer partnering with engineering, Platform, and DevOps teams to secure applications, cloud infrastructure, APIs, and the software development lifecycle as the platform scales.

Latvia Poland Serbia Spain Cyprus Georgia Full-time Mid Level Application Security Engineer
AWS Azure Blockchain CI/CD Docker GCP Kubernetes Microservices Penetration Testing REST API Secrets Management
18 hours, 21 minutes ago
Coforge

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Peru Mid Level Application Security Engineer
Azure Git GitHub
1 day, 17 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers