Remote Application Security Engineer — SAST & Checkmarx Expert

BairesDev; Chile; Presencial; CLP 109.689.000 - 155.393.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

USD compensation

Hardware provided

Flexible schedule

Parental leave

Diverse team

Descripción de la vacante

BairesDev is seeking an Application Security Engineer to operate SAST tooling in production, tuning Checkmarx or equivalent, triaging findings, and validating source-to-sink decisions. You will be the technical expert ensuring issues are real and well-documented.

You'll work 100% remotely with flexible hours, competitive USD compensation, and hardware/setup provided. The role requires strong English, 5+ years in security, and collaboration with development teams to remediate vulnerabilities.

Formación

• 5+ years of experience in application security or software engineering.
• Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Experience with source-to-sink validation and triage of security findings.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

Responsabilidades

• Run and tune SAST tooling in production environments.
• Triage individual security findings through source-to-sink validation.
• Manage false positives and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and improve signal quality.

Conocimientos

Application security

SAST tooling

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking an Application Security Engineer to operate SAST tooling in production, tuning Checkmarx or equivalent, triaging findings, and validating source-to-sink decisions. You will be the technical expert ensuring issues are real and well-documented.

You'll work 100% remotely with flexible hours, competitive USD compensation, and hardware/setup provided. The role requires strong English, 5+ years in security, and collaboration with development teams to remediate vulnerabilities.