SAST Engineer (Remote)

About the role

We are looking for a seasoned SAST Engineer to lead static analysis efforts across our global client base. In this fully remote position you will own the configuration, tuning, and continuous improvement of our SAST tools, ensuring high‑quality security findings at scale.

Key responsibilities

• Operate and tune SAST tools, including rule customization and custom query development.
• Perform in‑depth triage of static analysis findings through source‑to‑sink validation.
• Manage false positives and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve static analysis configurations and coverage.

Required profile

• 5+ years of dedicated experience in static analysis or application security.
• Deep hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven ability to tune rules, develop custom queries, and validate source‑to‑sink flows.
• Strong capability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Static analysis
• Rule tuning
• Custom query development
• Source‑to‑sink validation
• Vulnerability triage

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours – create your own schedule.
• Paid parental leave, vacations, and national holidays.
• Multicultural environment with top‑tier global talent.
• Mentorship, promotion pathways, and continuous skill development.