Application Security Analyst – Manual Code Review (Remote)

About the role

You will spend your day reading and analysing production code to uncover security weaknesses. Working remotely, you will trace data flows across languages such as Java, C#, Go, and Python, and produce audit‑ready documentation that satisfies compliance requirements.

Key responsibilities

• Perform manual secure code reviews across multiple programming languages.
• Tri­age and disposition SAST findings with evidence‑based documentation.
• Produce audit‑traceable records of true‑positive and false‑positive determinations.
• Collaborate with development teams to validate and remediate confirmed vulnerabilities.
• Support compliance and audit requirements through rigorous finding documentation.

Required profile

• 5+ years of experience in application security, secure code review, or software development with a security focus.
• Strong ability to read and analyse code in Java, C#, Go, or Python.
• Experience with source‑to‑sink data‑flow analysis and manual secure code review.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Experience producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Java
• C#
• Go
• Python
• Source‑to‑sink data‑flow analysis
• Manual secure code review
• SAST tools (Checkmarx, Fortify, Veracode, Coverity)

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations and holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.