Application Security Engineer – Checkmarx SAST (Remote)

About the role

BairesDev is seeking an experienced Application Security Engineer to own the day‑to‑day operation of SAST tools in production. You will work remotely, collaborating with development teams to identify, validate, and remediate real security vulnerabilities, ensuring the security posture of our clients' applications stays robust.

Key responsibilities

• Run, tune, and maintain SAST tooling (Checkmarx or equivalent) in production environments.
• Perform source‑to‑sink validation and triage each security finding.
• Identify false positives, document decisions, and communicate true findings.
• Partner with developers to remediate confirmed vulnerabilities.
• Continuously refine SAST configurations to reduce noise and improve signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Proven ability to conduct source‑to‑sink validation and triage security findings.
• Strong analytical skills to distinguish true vulnerabilities from false positives and document rationale.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST tooling

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Multicultural environment with mentorship, promotion pathways, and continuous skill development.