Application Security Analyst – Manual Code Review (Remote)

About the role

Join a global team of top‑tier technologists as an Application Security Analyst focused on manual code review. You will work remotely, analyzing codebases across multiple languages to identify and document security vulnerabilities in a compliance‑driven environment.

Key responsibilities

• Perform manual secure code reviews in Java, C#, Go, and Python, tracing data flow from source to sink.
• Tri­age and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true and false positive determinations.
• Collaborate with development teams to validate and remediate confirmed vulnerabilities.
• Support compliance and audit requirements through rigorous finding documentation.

Required profile

• 5+ years of experience in application security, secure code review, or security‑focused software development.
• Strong ability to read and analyze code in Java, C#, Go, or Python.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Experience producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and continuous skill development.