Practice Lead, Application Security Engineer

Summary

Join GuidePoint Security as a Practice Lead for Application Security Engineering in the Southeast region! You will oversee Application Security service operations, leveraging technical expertise and leadership to manage teams, projects, and client relationships. This role demands ensuring high-quality service delivery, providing technical oversight, and contributing to client success. You will mentor analysts and project leads, monitor project progress, and provide technical guidance. Staying current with industry trends is crucial, and you'll contribute to presales conversations. This position offers a unique opportunity for career growth within a rapidly expanding company.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field
• 3–5 years in Application Security roles with leadership experience
• Proficiency in at least one programming language (e.g., Java, Python, Ruby, C#)
• Hands-on experience with Application Security tools like Veracode, Checkmarx, Snyk, Mend.io, GitLab, Black Duck, Sonatype, Invicti, Tenable, Qualys, OWASP Zap, Burp Suite, etc
• Strong understanding of compliance frameworks (e.g., NIST, PCI-DSS, GDPR)
• Expertise in OWASP standards (SAMM, ASVS, OWASP Top 10)
• Excellent written and verbal communication
• Strong organizational and project management capabilities
• Problem-solving mindset with the ability to manage competing priorities

Responsibilities

• Mentor analysts and project leads, ensuring successful delivery across multiple engagements
• Monitor project progress, allocate resources, and act as a decision-maker and point of escalation for project execution
• Provide technical guidance for escalated vulnerabilities and oversee deliverables for quality and accuracy
• Occasionally lead large or complex projects
• Stay informed on industry trends and advancements, dedicating time weekly for research to support presales conversations related to tooling
• Ensure team members are aligned with work priorities

Preferred Qualifications

• Relevant certifications (e.g., CISSP, OSCP, GWAPT)
• Experience integrating security into CI/CD pipelines and DevSecOps practices

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family) and GPS will contribute in one lump sum: ($500 per EE annually / $1000 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option