Application Security Analyst – Manual Code Review (Remote)

About the role

We are looking for an Application Security Analyst who specializes in manual secure code review. You will work remotely, analysing codebases written in Java, C#, Go or Python, tracing data flows from source to sink and documenting findings for compliance‑driven environments.

Key responsibilities

• Perform manual secure code reviews across multiple programming languages.
• Trace source‑to‑sink data flows to identify and validate vulnerabilities.
• Triage and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true and false positive determinations.
• Collaborate with development teams to remediate confirmed issues.
• Support compliance and audit requirements through rigorous documentation.

Required profile

• 5+ years of experience in application security, secure code review, or security‑focused software development.
• Strong ability to read and analyse code in Java, C#, Go or Python.
• Experience with source‑to‑sink data‑flow analysis and manual code review.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode or Coverity.
• Proven track record of producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Source‑to‑sink data‑flow analysis
• Manual secure code review
• SAST tools (Checkmarx, Fortify, Veracode, Coverity)

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, national holidays.
• Multicultural environment with mentorship, skill development and growth opportunities.