SAST Engineer – Remote (Full‑time)

About the role

Join a leading global technology services firm as a SAST Engineer, focusing exclusively on static application security testing. You will work remotely, collaborating with development teams worldwide to ensure the security and reliability of their codebases.

Key responsibilities

• Operate and fine‑tune SAST tools, including rule customization and custom query development.
• Perform in‑depth triage of static analysis findings through source‑to‑sink validation.
• Identify, document, and manage false positives versus true vulnerabilities.
• Collaborate with developers to remediate confirmed security issues.
• Continuously improve static analysis configurations, coverage, and overall effectiveness.

Required profile

• 5+ years of dedicated experience in static analysis or application security.
• Proven ability to distinguish true security findings from false positives and clearly document decisions.
• Advanced proficiency in English, both written and spoken.

Required skills

• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Experience in rule tuning and custom query development for static analysis engines.
• Strong source‑to‑sink validation and security finding triage capabilities.

What we offer

• 100 % remote work from anywhere.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible hours and the ability to create your own schedule.
• Paid parental leave, vacation, and national holidays.
• Mentorship, skill development, and clear promotion pathways within a multicultural, top‑talent environment.