Application Engineer

• Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.
• Independently identify security improvements and implement them.
• Implement, manage, and automate vulnerability management processes.
• Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.
• Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.
• Collaborate in providing actionable recommendations to find workable solutions.
• Establish a threat hunting capability and automate where appropriate.
• Enhance logging capabilities related to security events.
• Integrate and manage dynamic and static code analysis tools.
• Ensure operation of security tools within the development pipeline.

Application Security Engineer

• Lead the end-to-end design and delivery of scalable, secure, and intelligent GTM systems that support HackerOne’s transformation into an AI-native organization, embedding AI First principles into workflows, architecture, and operational processes.
• Own and evolve the architecture across Salesforce Sales Cloud, Experience Cloud, CPQ, Clay, Marketo, and adjacent platforms, redesigning legacy processes and systems to maximize automation, scalability, and business impact through AI First thinking.
• Drive GTM systems strategy and roadmap development by partnering closely with executive stakeholders, including the CEO and SVP of GTM Operations, applying Data-Driven Decision Making to prioritize investments, measure outcomes, and continuously improve business performance.
• Apply First Principles Problem Solving to deconstruct complex GTM challenges, identify root causes, and design simple, scalable solutions that improve operational efficiency, forecasting accuracy, and revenue execution.
• Demonstrate Change Agility by leading platform modernization efforts, helping stakeholders navigate evolving business requirements, and building repeatable frameworks that enable teams to adapt quickly to changing priorities and market conditions.
• Partner across business, engineering, and operations teams to identify high-leverage opportunities for automation, integration, and AI-powered capabilities that reduce manual effort and improve decision quality.
• Provide technical leadership and mentorship to internal engineers and external development partners, establishing standards, best practices, and scalable operating models that elevate engineering quality across GTM systems.
• Champion operational excellence through robust automation, governance, documentation, incident management, and change management processes, ensuring systems are resilient, trusted, and broadly adopted across the organization.

Staff Applications Engineer – GTM Systems

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

Senior Application Security Engineer

• Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
• Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
• Secure enterprise web applications, with a focus on mitigating OWASP Top 10 risks, CVSS scoring, CWE, WASC, and SANS Top 25 vulnerabilities.
• Integrate security practices into development workflows using IDEs such as Eclipse, JDeveloper (including pipeline development), or Visual Studio.
• Perform application security testing and automation using tools such as OWASP ZAP, Burp Proxy, Selenium, and Interactive Application Security Testing (IAST) capabilities.
• Write and maintain bash scripts to support security automation, testing, and troubleshooting tasks.
• Participate in vulnerability discovery, triage, and remediation processes, including crowdsourced security programs via platforms like HackerOne.
• Work in Linux or UNIX environments, including navigating file systems and troubleshooting basic website connectivity and security issues.
• Ensure applications and security practices align with federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.

Application Security Engineer – DAST, Burp Suite

• Perform DAST scanning using Burp Suite Enterprise, including configuration, execution, and analysis of scan results.
• Conduct SAST assessments using Veracode, identifying code-level vulnerabilities and recommending remediation strategies.
• Analyze and prioritize vulnerabilities based on risk, leveraging frameworks such as CVSS, CWE, OWASP Top 10, WASC, and SANS-25.
• Collaborate with development, DevOps, and security teams to integrate security into the SDLC and CI/CD pipelines.
• Provide guidance on secure coding practices and assist developers with vulnerability remediation.
• Support the implementation and maintenance of IDE security plug-ins and secure development tools.
• Troubleshoot application and connectivity issues within Linux-based environments.
• Contribute to the design and implementation of enterprise-wide application security controls.
• Ensure alignment with federal compliance standards, including NIST 800-53, FIPS, and FedRAMP.
• Stay current with emerging threats, vulnerabilities, and application security best practices.

• Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.
• Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
• Define, maintain, and enforce secure coding standards, patterns, and best practices.
• Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.
• Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.
• Support threat modeling, risk assessments, and security architecture reviews for applications.
• Ensure that all security practices meet regulatory and compliance requirements.
• Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.
• Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).
• Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
• Monitor and respond to application security threats, incidents and vulnerabilities.
• Stay up to date on regulatory developments and industry trends.
• Manage and maintain third-party vendor and consultant relationships.
• Perform other duties as assigned.

See all jobs on JobTailor

Application Security Engineer

Staff Applications Engineer – GTM Systems

Senior Application Security Engineer

Application Security Engineer – DAST, Burp Suite

Application Security Engineer

Application Security Engineer