Application Security Engineer – Checkmarx SAST (Remote)

About the role

We are looking for an Application Security Engineer who will own the day‑to‑day operation of static application security testing (SAST) tools in production. You will run, tune and triage findings from Checkmarx or equivalent solutions, ensuring that real vulnerabilities are identified and false positives are efficiently managed.

Key responsibilities

• Deploy, configure and continuously tune SAST tooling in production environments.
• Perform source‑to‑sink validation to triage individual security findings.
• Identify and document true versus false positive determinations.
• Work closely with development teams to remediate confirmed vulnerabilities.
• Iteratively improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools such as Checkmarx, Fortify, Veracode or Coverity in production.
• Proven ability to conduct source‑to‑sink validation and triage security findings.
• Strong analytical skills to distinguish true vulnerabilities from false positives and document decisions clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacation and national holidays.
• Multicultural environment with mentorship, promotion and skill‑development opportunities.