Application Security Engineer (Checkmarx / SAST) – Remote

About the role

Join a global team of top‑tier tech talent as an Application Security Engineer focused on static application security testing (SAST). You will operate and fine‑tune SAST tools in production, triage findings, and ensure real vulnerabilities are addressed, directly influencing the security posture of critical applications.

Key responsibilities

• Run, configure, and continuously tune SAST tooling (e.g., Checkmarx) in production environments.
• Perform source‑to‑sink validation on individual security findings.
• Identify and manage false positives, documenting decisions clearly.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven ability to conduct source‑to‑sink validation and triage security findings.
• Strong analytical skills to distinguish true vulnerabilities from false positives.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacations, and holidays.
• Multicultural environment with mentorship, promotions, and skill‑development opportunities.