Application Security Engineer – SAST (Checkmarx) – Remote

About the role

Join a global team of top tech talent as an Application Security Engineer focused on static application security testing (SAST). You will operate and fine‑tune Checkmarx or equivalent tools in production, ensuring real vulnerabilities are identified and addressed.

Key responsibilities

• Run and continuously tune SAST tooling in production environments.
• Perform source‑to‑sink validation to triage individual security findings.
• Identify, manage, and document false positives versus true vulnerabilities.
• Work closely with development teams to remediate confirmed issues.
• Improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Proven ability to conduct source‑to‑sink validation and triage findings.
• Strong analytical skills to distinguish true from false positives and document decisions.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Multicultural environment with mentorship, promotion pathways, and skill development.