Application Security Engineer (Checkmarx / SAST) – Remote

About the role

As an Application Security Engineer you will operate SAST tools in production environments, focusing on accurate triage of security findings. You will work remotely with a global team, ensuring that only genuine vulnerabilities reach developers while minimizing noise.

Key responsibilities

• Run and fine‑tune SAST solutions such as Checkmarx in live environments.
• Perform source‑to‑sink validation for each security finding.
• Identify and document false positives.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools in production.
• Strong ability to distinguish true vulnerabilities from false positives.
• Advanced English communication skills.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling
• Source‑to‑sink validation

What we offer

• 100% remote work from any location.
• Compensation in USD or local currency, well above market average.
• Provided hardware and software.
• Flexible working hours.
• Paid parental leave, vacation and national holidays.
• Multicultural, innovative environment with mentorship and training opportunities.