[Hiring] Application Security Consultant @GuidePoint Security

Role Description

We are looking for a skilled Application Security Consultant to support the delivery of GuidePoint Security’s Application Security service offerings, including:

• Application Security Assessments for web, mobile, and thick client applications
• AI/LLM and Agentic Application Security Assessments
• Threat Modeling
• Source Code Reviews
• Application Architecture Reviews
• Secure Development Training
• Secure SDLC Implementation

This role will engage in the execution of challenging and complex technical assessments and the development of new and evolving service capabilities while providing “Wow Them” service to clients and/or internal customers or co-workers.

The Application Security Consultant will be required to demonstrate strong offensive application testing, secure code review, and AI/LLM security skills, lead by influence, and apply strong business and technical acumen to translate technical findings into realistic remediation strategies that align with client business objectives and priorities.

As a technically adept and reliable team member, you will leverage your knowledge, skills, and experience to deliver exceptional results for the Practice’s core professional service offerings, share knowledge with team members, and help shape the Practice’s future.

Qualifications

• High School Diploma + 5 years of experience OR Bachelor’s Degree (BS/BA) + 2 years of experience OR Master’s Degree (MS/MA)
• Minimum of two (2) years of experience performing Application Security assessments
• Minimum of one (1) year of experience in an enterprise-level consulting services role
• Experience with testing tools such as Burp Suite, Postman, Netsparker, sqlmap, DirBuster, OpenSSL, etc.
• Experience reviewing source code written in JavaScript, Python, Java, C++, PHP, or C#
• Hands-on experience testing AI/LLM-powered applications and agentic AI systems (chatbots, RAG pipelines, autonomous/multi-agent workflows)
• Familiarity with the OWASP Top 10 for LLM Applications and the OWASP Top 10 for Agentic Applications
• General AI fluency and practical usage, including working with LLM APIs/SDKs
• Embraces emerging technologies, including AI tools

Requirements

• Deliver Application Security services, including but not limited to Application Security Assessments for various application types (web, mobile, AI, thick client), Threat Modeling, and Source Code Reviews.
• Perform AI/LLM and Agentic Application Security Assessments, including prompt injection testing, model/guardrail bypass, excessive agency abuse, tool-calling exploitation, RAG poisoning, and other attacks mapped to the OWASP Top 10 for LLM Applications and the OWASP Top 10 for Agentic Applications.
• Assess agentic AI architectures for excessive agency, insecure tool/function integrations, goal manipulation, cross-agent/cross-prompt injection, and unsafe autonomy boundaries.
• Author assessment deliverables that are tailored to both technical and managerial audiences.
• Build and extend AI-driven tooling to support assessments.
• Utilize automation, orchestration, scripting, and AI-assisted tooling to reduce manual processes.
• Contribute to Application Security research projects and support marketing initiatives.
• Foster client relationships and perpetually strengthen relevant skills.
• Maintain a strong desire to learn, adapt, and improve.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option