Application Security Engineer (Checkmarx / SAST) – Trabajo Remoto

About the role

We are looking for an Application Security Engineer specialized in static application security testing (SAST) to join our fully remote team. You will operate and fine‑tune SAST tools in production, triage findings, and ensure that only genuine vulnerabilities are addressed.

Key responsibilities

• Execute and adjust SAST tools (e.g., Checkmarx) in production environments.
• Perform source‑to‑sink validation to triage individual security findings.
• Identify, manage, and document false positives.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and enhance signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Proven ability to validate source‑to‑sink flows and triage security findings.
• Strong analytical skills to distinguish true vulnerabilities from false positives and document decisions clearly.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tools

What we offer

• 100% remote work from any location.
• Compensation in USD or local currency, well above market average.
• Provision of hardware and software.
• Flexible working hours.
• Paid parental leave, vacation and national holidays.
• Multicultural, innovative environment with mentorship and training opportunities.