Application Security Engineer – Checkmarx/SAST (Remote)

About the role

We are looking for an Application Security Engineer to own the day‑to‑day operation of our SAST tooling. You will run, tune, and continuously improve Checkmarx or equivalent solutions, ensuring that real vulnerabilities are identified and addressed while minimizing noise.

Key responsibilities

• Operate and fine‑tune SAST tools in production environments.
• Perform source‑to‑sink validation and triage each security finding.
• Identify and manage false positives, documenting decisions clearly.
• Work closely with development teams to remediate confirmed issues.
• Iteratively improve SAST configurations to increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven ability to conduct source‑to‑sink validation and distinguish true from false positives.
• Strong written communication in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software provision for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Multicultural environment with mentorship, promotion, and skill‑development opportunities.