Application Security Engineer – Remote

About the role

Join BairesDev as an Application Security Engineer focused on hands‑on SAST triage, secure code review, and source‑to‑sink validation. You will work remotely, analyzing findings, tuning tools, and directly protecting production systems.

Key responsibilities

• Perform dedicated SAST triage and evaluate individual findings through source‑to‑sink validation.
• Operate, tune, and maintain SAST tools in production environments.
• Conduct secure code reviews and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Improve analysis signal quality by reducing noise and refining rule configurations.

Required profile

• 5+ years of experience in application security with a strong focus on hands‑on SAST triage.
• Deep experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Proven ability to perform source‑to‑sink validation and secure code review.
• Experience managing false positives and documenting security finding decisions with precision.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and national holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.