Application Security Engineer – SAST (Checkmarx) – Remote

About the role

Join a global team of top‑tier tech talent as an Application Security Engineer focused on static application security testing (SAST). You will operate and fine‑tune SAST tools in production, triage findings, and work closely with developers to remediate real vulnerabilities.

Key responsibilities

• Run and continuously tune Checkmarx or equivalent SAST tools in live environments.
• Perform source‑to‑sink validation on individual security findings.
• Identify and manage false positives, documenting decisions for each case.
• Collaborate with development teams to remediate confirmed issues.
• Improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools in production settings.
• Proven ability to distinguish true vulnerabilities from false positives.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural environment.