Senior Application Security Engineer - GuidePoint Security LLC

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint Security offers an inclusive set of Application Security services helping clients implement, fine tune and run their Application Security SAST, DAST and SCA tools. Many clients need assistance with either supplementing their Application Security teams or simply need teammates who have a specialization in Application Security.

Roles and Responsibilities :

• Implement, operationalize, and/or improve the configuration of client application security tools
• Perform manual application/API assessments of customer applications
• Assist customers with questions relating to practical use of application security tools
• Advise customers on application security best practices
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Required Experience :

• Experiential understanding of the Software Development Lifecycle (SDLC
• Experience with automation tools such as Jenkins
• Practical understanding of cloud infrastructure environments such as AWS/Azure/GCP including “serverless” workflows
• In-depth knowledge of Application Security tools
• Fundamental knowledge of software composition analysis and code/library dependencies
• Experience with testing tools such as: Burp Suite, Netsparker, Veracode, Checkmarx, Snyk, Invicti, etc.
• Deep understanding of a broad range of Application Security issues as well as their mitigation strategies
• Understanding of Application Security related vulnerabilities including cryptographic implementations
• Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C#
• Written communication skills for written interactions with clients
• Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into stakeholder-friendly language
• Ability to manage time independently while handling multiple projects concurrently
• Standard industry certifications are preferred
• Significant knowledge of SAST, DAST, SCA, IAST, and/or RASP tooling preferred

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

Firmly-defined core valu