Application Security Engineer – SAST (Checkmarx) – Remote

About the role

We are looking for an Application Security Engineer who will own the day‑to‑day operation of SAST tooling in production. You will work closely with development teams to triage findings, eliminate false positives, and ensure that real vulnerabilities are remediated, directly influencing the security posture of our clients' applications.

Key responsibilities

• Run and continuously tune SAST tools (e.g., Checkmarx) in production environments.
• Perform source‑to‑sink validation on individual security findings.
• Identify, manage, and document false positives versus true vulnerabilities.
• Collaborate with developers to remediate confirmed issues.
• Improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools in production.
• Proven ability to distinguish true from false positives and document decisions clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule – create your own hours.
• Paid parental leave, vacations, and holidays.
• Multicultural environment with mentorship, promotions, and skill development.