Application Security Engineer

Guild Mortgage

Application Security Engineer securing Guild Mortgage’s mortgage-financing applications and AI services. Testing vulnerabilities, implementing AI guardrails, and guiding secure software development.

Posted 8/19/2026full-timeRemote • California, New York • 🇺🇸 United StatesMid-LevelSenior💰 $82,000 - $118,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in secure development practices, vulnerability assessment, and remediation guidance, particularly in AI-enabled applications. Proficient in collaborating with cross-functional teams to integrate security requirements and maintain application security tools.

Highest-signal resume keywords

Secure Development PracticesVulnerability AssessmentAI Security ImplementationBurp Suite Certified PractitionerExcellent Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Code ReviewSecurity TestingRisk AnalysisThreat ModelingVulnerability RemediationAI Guardrails ImplementationOWASP Top 10MITRE ATLASCI/CD PipelinesApplication Security

Soft Skills

Interpersonal CommunicationDetail-OrientedOrganizational SkillsIndependent WorkTeam Collaboration

Tools & Technologies

Burp SuiteMicrosoft Office SuiteCollaborative Cloud-Based ProgramsOpen-Source Security ToolsThird-Party Software Applications

Certifications & Qualifications

Burp Suite Certified PractitionerHack the Box Certified Web Exploitation SpecialistPractical Web Pentest Professional

Industry Keywords

Application SecurityCyber SecuritySecure Coding PracticesShift Left InitiativesIncident ResponseAI-Enabled ApplicationsData Loss PreventionSecurity Champions ProgramComplianceSecurity Awareness

Tech Stack

Tools & technologies

AirflowAmazon RedshiftAWSAzureCassandraCloudCyber SecurityDynamoDBETLInformaticaITSMJavaJavaScriptKafkaKerasMongoDBMS SQL ServerMySQLNoSQLPostgresPythonPyTorchRedisScalaSDLCSparkSQLTableauTensorflow

About the role

Key responsibilities & impact

Apply and help maintain secure development practices, including code review and security testing integrated into CI/CD pipelines
Identify, validate, and triage application vulnerabilities through automated and manual testing
Help development teams adopt secure coding practices and remediate findings through Shift Left initiatives
Support the Security Champions program, including training delivery and day-to-day questions
Assist developers with vulnerability reproduction, risk analysis, and remediation guidance
Escalate complex or high-risk issues to the Senior Application Security Engineer
Operate, tune, and maintain Application Security program tools, including open-source solutions
Collaborate with product, engineering, DevOps, and compliance teams to integrate security requirements into application design
Assist incident response teams in investigating and remediating application-related security incidents
Participate in threat modeling exercises and security design reviews
Perform recurring security testing and vulnerability assessments; maintain security control documentation and evidence
Apply secure design patterns to AI-enabled applications, including LLM integrations, RAG pipelines, and agentic workflows
Implement, configure, test, and monitor AI guardrails, including prompt injection defenses, input/output filtering and validation, least-privilege scoping, and data loss prevention
Execute AI/LLM red-team tests covering prompt injection, jailbreaks, sensitive data disclosure, insecure output handling, and excessive agency
Document AI security findings and remediation guidance using OWASP Top 10 for LLM Applications and MITRE ATLAS
Support security reviews of new AI use cases and third-party AI features, including controls over nonpublic personal information
Help enforce secure usage standards for AI coding assistants, including human review and scanning of AI-generated code
Stay informed about emerging application and AI security threats and support compliance and security awareness initiatives

Requirements

What you’ll need

Bachelor's degree in Computer Science, Software Engineering, Cyber Security or equivalent, preferred
A combination of education and experience may be considered in lieu of the Bachelor’s degree
Minimum three years' experience as a software developer or similar experience
Preferred qualifications: Burp Suite Certified Practitioner, Hack the Box Certified Web Exploitation Specialist (HTB CWES), Practical Web Pentest Professional (PWPP)
Ability to organize and manage multiple priorities simultaneously
Ability to work well independently or within a team
Ability to handle confidential matters with discretion
Excellent interpersonal communication skills
Excellent verbal and written communication skills
Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment
Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications
Ability to learn new tasks, remember processes, maintain focus, complete tasks independently, and make timely decisions
Ability to operate standard office equipment and keyboards
Ability to accurately perceive, distinguish, and interpret visual and audio information
Availability to work primarily Monday–Friday during the business week
Travel of 5% or less

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
AD&D insurance
LTD insurance
401(k) with employer match
Competitive compensation
Pleasant work environment
Remote work from home