Application Security Analyst – Code Review (Remote)

About the role

You will perform manual secure code reviews across multiple programming languages, tracing data flow from source to sink and documenting findings for compliance and audit purposes. This role requires deep technical analysis of code to identify and mitigate security vulnerabilities.

Key responsibilities

• Conduct manual secure code reviews in Java, C#, Go, Python, and other languages.
• Trace data flow from source to sink to uncover potential vulnerabilities.
• Triage and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true and false positive determinations.
• Collaborate with development teams to validate and remediate confirmed vulnerabilities.
• Support compliance and audit requirements through rigorous documentation.

Required profile

• 5+ years of experience in application security, secure code review, or software development with a security focus.
• Strong ability to read and analyze code in Java, C#, Go, or Python.
• Experience with source‑to‑sink data flow analysis and manual secure code review.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Experience producing audit‑traceable documentation in regulated or compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Source‑to‑sink data flow analysis
• Manual secure code review
• SAST tools (Checkmarx, Fortify, Veracode, Coverity)

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and national holidays.
• Multicultural environment with mentorship, promotions, and skill development opportunities.