Application Security Analyst (Code Review)

About the role

The Application Security Analyst (Code Review) works directly with source code to identify and document security vulnerabilities. You will analyze data flows across multiple programming languages and produce audit‑ready evidence for compliance teams.

Key responsibilities

• Perform manual secure code review across Java, C#, Go, Python and other languages.
• Trace data flow from source to sink to uncover potential vulnerabilities.
• Triage and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true and false positive determinations.
• Collaborate with development teams to validate and remediate confirmed issues.
• Support compliance and audit requirements through rigorous documentation.

Required profile

• 5+ years of experience in application security, secure code review, or security‑focused software development.
• Strong ability to read and analyze code in Java, C#, Go, or Python.
• Experience with source‑to‑sink data‑flow analysis and manual code review.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven track record of producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for a home office.
• Flexible hours – create your own schedule.
• Paid parental leave, vacations, and national holidays.
• Multicultural environment with global top‑talent collaboration.
• Mentorship, promotion pathways, and continuous skill development.