Application Security Engineer (Remote)

About the role

BairesDev is seeking an experienced Application Security Engineer to focus on static application security testing (SAST) triage, secure code review, and source‑to‑sink validation. This fully remote role allows you to dive deep into security findings and directly protect production systems.

Key responsibilities

• Perform dedicated SAST triage, evaluating each finding through source‑to‑sink validation.
• Operate, tune, and maintain SAST tools in production environments.
• Conduct secure code reviews and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Improve analysis signal quality by reducing noise and refining rule configurations.

Required profile

• 5+ years of hands‑on application security experience, primarily focused on SAST triage.
• Proven ability to perform source‑to‑sink validation and secure code review.
• Experience managing false positives and documenting security finding decisions.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation
• Secure code review

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Multicultural environment with mentorship, promotion pathways, and skill development.