Application Security Analyst (Code Review)

About the role

As an Application Security Analyst focused on code review, you will examine source code across multiple languages to identify and document security vulnerabilities. Your work directly supports risk decisions and compliance requirements in a regulated environment.

Key responsibilities

• Perform manual secure code reviews in Java, C#, Go, and Python, tracing data flow from source to sink.
• Tri­age and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true and false positive determinations.
• Collaborate with development teams to validate and remediate confirmed vulnerabilities.
• Support compliance and audit requirements through rigorous finding documentation.

Required profile

• 5+ years of experience in application security, secure code review, or security‑focused software development.
• Strong ability to read and analyze code in Java, C#, Go, or Python.
• Experience with source‑to‑sink data‑flow analysis and manual code review.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven track record of producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Source‑to‑sink data‑flow analysis
• Manual secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations, national holidays.
• Multicultural environment with mentorship, promotions, and skill‑development opportunities.