Application Security Engineer

The Application Security Engineer at Guild Mortgage supports the security of our applications, including AI-enabled applications and services. Working within established secure development standards, they perform code reviews, run and tune security testing in our CI/CD pipelines, and identify, triage, and resolve application vulnerabilities using both automated tools and manual testing techniques.

• Apply and help maintain secure development practices, including code review and security testing integrated into CI/CD pipelines.
• Identify, validate, and triage application vulnerabilities through automated and manual testing.
• Support Shift Left initiatives by helping development teams adopt secure coding practices and remediate findings.
• Support the Security Champions program on development teams, including training delivery and day-to-day questions.
• Assist developers with vulnerability reproduction, risk analysis, and remediation guidance, escalating complex or high-risk issues to senior staff.
• Operate, tune, and maintain tools within the Application Security program, including open-source solutions.
• Collaborate with product, engineering, DevOps, and compliance teams to integrate security requirements into application design.
• Assist incident response teams in investigating and remediating application-related security incidents.
• Threat Modeling & Risk Assessment: Participate in threat modeling exercises and security design reviews for new and existing applications under the direction of senior staff.
• Perform recurring security testing and vulnerability assessments and maintain security control documentation and evidence.
• Secure AI Development: Apply established security standards and secure design patterns to AI-enabled applications, including LLM integrations, retrieval-augmented generation (RAG) pipelines, and agentic workflows.
• AI Guardrails: Implement, configure, test, and monitor AI guardrails, including prompt injection defenses, input and output filtering and validation, least-privilege scoping of agent tools and data sources, and data loss prevention across model inputs and outputs.
• AI Red Teaming: Execute adversarial test cases against AI and LLM applications covering prompt injection, jailbreaks, sensitive data disclosure, insecure output handling, and excessive agency; document findings and remediation guidance using the OWASP Top 10 for LLM Applications and MITRE ATLAS as references.
• Support security reviews of new AI use cases and third-party AI features, including verification of controls over nonpublic personal information used by AI systems.
• Follow and help enforce secure usage standards for AI coding assistants, including human review and scanning requirements for AI-generated code.
• Stay informed about emerging application and AI security threats, support compliance requirements, and contribute to a culture of security awareness across the organization.

• Bachelor's degree in degree in Computer Science, Software Engineering, Cyber Security or equivalent, preferred.
• A combination of education and experience may be considered in lieu of the Bachelor’s degree.
• Minimum three years' experience as a software developer or similar experience. 
• Preferred qualifications: Burp Suite Certified Practitioner, Hack the Box Certified Web Exploitation Specialist (HTB CWES), Practical Web Pentest Professional (PWPP).
• Ability to organize and manage multiple priorities simultaneously.
• Ability to work well independently or within a team.
• Must be able to handle confidential matters with discretion.
• Excellent interpersonal communication skills required.
• Excellent verbal and written communication skills
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
• Commitment to company
• Customer Service - Proactive attention to each person
• Integrity - Do and say what's right
• Respect - Treat others with dignity
• Collaboration - Listen and work together
• Learning - Seek knowledge and strive for improvement
• Excellence – Deliver the unexpected

Guild offers a pleasant work environment, competitive compensation and excellent benefits package; including medical, dental, vision, life insurance, AD&D, LTD and 401(k) with employer match.

Guild Mortgage Company is an Equal Opportunity Employer. 

 REQ#: APPLI018419

• Job Scope: Recognized as a developing contributor
• Complexity: Problems encountered are often complex and may involve significant resource coordination and availability, evaluating and resolving discrepancies with data, analyses, processes, etc. using own expertise and judgment
• Impact: Decisions and actions primarily impact own work with moderate impact on peers in their area; contributes as team member rather than leader
• Interaction/Supervision: Works under broad direction with some latitude for independent actions; guided by professional standards, desired outcomes and unit/project/program specifications.