Application Security Engineer – Checkmarx SAST (Remote)

About the role

BairesDev® is seeking an experienced Application Security Engineer to own the day‑to‑day operation of static application security testing (SAST) tools. You will work remotely, collaborating with development teams to turn real security findings into actionable remediation while keeping false positives under control.

Key responsibilities

• Run, tune, and maintain SAST tooling (Checkmarx or equivalent) in production environments.
• Perform source‑to‑sink validation on individual security findings.
• Identify, manage, and document false positives versus true vulnerabilities.
• Partner with developers to remediate confirmed issues.
• Continuously improve SAST configurations to reduce noise and increase signal quality.

Required profile

• 5+ years of experience in application security or software engineering.
• Hands‑on experience operating SAST tools in production.
• Proven ability to triage security findings and clearly document decisions.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Source‑to‑sink validation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and continuous skill development within a multicultural, top‑talent environment.