Application Security Engineer (Checkmarx / SAST) – Remote

About the role

We are looking for an Application Security Engineer who will own the day‑to‑day operation of static application security testing (SAST) tools in production. The role focuses on running, tuning and triaging findings from Checkmarx or equivalent solutions to ensure real vulnerabilities are addressed.

Key responsibilities

• Operate and fine‑tune SAST tooling in production environments.
• Perform source‑to‑sink validation and triage individual security findings.
• Identify, manage and document false positives versus true vulnerabilities.
• Work closely with development teams to remediate confirmed issues.
• Continuously improve SAST configurations to reduce noise and increase signal quality.

Required profile

• Minimum 5 years of experience in application security or software engineering.
• Hands‑on experience with SAST tools in production settings.
• Proven ability to distinguish true vulnerabilities from false positives and document decisions clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100 % remote work from anywhere.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacation and holidays.
• Multicultural environment with top‑tier global talent.
• Mentorship, promotion pathways and skill‑development opportunities.