SAST Engineer – Remote

About the role

We are looking for a seasoned SAST Engineer to join our fully remote team. In this position you will own the configuration, tuning, and continuous improvement of static application security testing tools, ensuring high‑quality vulnerability detection at scale.

Key responsibilities

• Operate and fine‑tune SAST tools, including rule customization and custom query development.
• Perform deep source‑to‑sink validation to triage static analysis findings.
• Identify and document true versus false positives, reducing noise for development teams.
• Collaborate with developers to remediate confirmed vulnerabilities.
• Continuously enhance static analysis coverage and configuration.

Required profile

• 5+ years of dedicated experience in static analysis or application security.
• Proven ability to distinguish true from false positives and clearly document reasoning.
• Advanced proficiency in English.

Required skills

• Hands‑on experience with Checkmarx, Fortify, Veracode, or Coverity.
• Rule tuning and custom query development for SAST engines.
• Strong source‑to‑sink validation and security finding triage.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.