Application Security Engineer (Checkmarx / SAST) – Remote

About the role

As an Application Security Engineer you will own the day‑to‑day operation of SAST tooling in production environments. You will run, tune and triage findings from Checkmarx or equivalent solutions, ensuring that only genuine vulnerabilities are escalated to development teams.

Key responsibilities

• Operate and fine‑tune SAST tools (Checkmarx, Fortify, Veracode, Coverity) in production.
• Perform source‑to‑sink validation on each security finding.
• Identify, manage and document false positives versus true vulnerabilities.
• Collaborate with developers to remediate confirmed issues.
• Continuously improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience running SAST tools in production environments.
• Proven ability to triage security findings and distinguish true from false positives.
• Strong written communication skills in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacations and holidays.
• Multicultural environment with mentorship, promotions and skill development.