SAST Engineer – Remote

About the role

Join BairesDev as a SAST Engineer and become the primary driver of static application security testing across a global portfolio of projects. You will work remotely, collaborating with development teams to ensure code security at scale.

Key responsibilities

• Operate, tune, and customize SAST tools, creating custom queries and rules.
• Perform deep source‑to‑sink validation and triage of static analysis findings.
• Identify, document, and manage false positives versus true vulnerabilities.
• Work closely with developers to remediate confirmed security issues.
• Continuously improve static analysis coverage and configuration.

Required profile

• 5+ years of dedicated experience in static analysis or application security.
• Hands‑on expertise with SAST platforms such as Checkmarx, Fortify, Veracode, or Coverity.
• Strong ability to validate source‑to‑sink flows and triage security findings.
• Proven skill in distinguishing true positives from false positives and documenting decisions.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Static analysis rule tuning
• Custom query development

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and continuous skill development.