SAST Engineer – Remote (Ref#295992)

About the role

We are looking for a seasoned SAST Engineer to join our fully remote team. In this role you will own the configuration, tuning, and continuous improvement of static analysis tools, ensuring high‑quality security findings at scale.

Key responsibilities

• Operate and tune SAST tools, including rule customization and custom query development.
• Perform in‑depth triage of static analysis findings through source‑to‑sink validation.
• Manage false positives and clearly document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve static analysis configurations and coverage.

Required profile

• 5+ years of dedicated experience in static analysis or application security.
• Deep hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Strong source‑to‑sink validation and security finding triage skills.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Rule tuning
• Custom query development
• Source‑to‑sink validation
• Vulnerability triage

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and national holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.