Application Security Engineer (Checkmarx / SAST) - Remote Work | REF#298314
At BairesDev, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.
Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
Application Security Engineer (Checkmarx / SAST) at BairesDev
In this role, you'll operate SAST tooling in production day to day, running and tuning Checkmarx or equivalent tools, managing false positives, and performing source-to-sink validation on individual findings. This is hands-on triage work, not program management, requiring the precision to distinguish real vulnerabilities from noise and the discipline to document every decision. This is your opportunity to be the technical expert who keeps application security grounded in real findings rather than metrics, directly shaping the security posture of production systems.
What You'll Do
Apply now!
Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
Application Security Engineer (Checkmarx / SAST) at BairesDev
In this role, you'll operate SAST tooling in production day to day, running and tuning Checkmarx or equivalent tools, managing false positives, and performing source-to-sink validation on individual findings. This is hands-on triage work, not program management, requiring the precision to distinguish real vulnerabilities from noise and the discipline to document every decision. This is your opportunity to be the technical expert who keeps application security grounded in real findings rather than metrics, directly shaping the security posture of production systems.
What You'll Do
- Run and tune SAST tooling in production environments.
- Triage individual security findings through source-to-sink validation.
- Manage false positives and document true versus false positive determinations.
- Collaborate with development teams to remediate confirmed vulnerabilities.
- Continuously improve SAST configurations to reduce noise and improve signal quality.
- 5+ years of experience in application security or software engineering.
- Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
- Experience with source-to-sink validation and triage of security findings.
- Ability to distinguish true from false positives and document reasoning clearly.
- Advanced proficiency in English.
- 100% remote work (from anywhere).
- Excellent compensation in USD or your local currency if preferred
- Hardware and software setup for you to work from home.
- Flexible hours: create your own schedule.
- Paid parental leaves, vacations, and national holidays.
- Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
- Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
Apply now!
Empleos Recomendados
Executive Assistant (Junior)
Publicado hace 7 horas
Líder de Soporte y Desarrollo
Publicado hace 7 horas
Ingeniero/a de senior de GRC
Publicado hace 8 horas
Business Development Representative (Junior)
Publicado hace 8 horas
Marketing Specialist (Junior)
Publicado hace 8 horas

