Remote AppSec Engineer: Checkmarx/SAST Expert

BairesDev; Bogotá; Presencial; COP 282.397.000 - 407.907.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD compensation

Hardware and software setup at home

Flexible hours

Paid parental leaves and vacations

Mentorship and growth opportunities

Descripción de la vacante

BairesDev is hiring an Application Security Engineer to operate SAST tooling in production, triaging findings and reducing noise. You will work with Checkmarx or equivalent tools, collaborating with development teams to remediate vulnerabilities, and continuously refine configurations.

The role offers 100% remote work, competitive compensation in USD or local currency, and a supportive environment with mentorship and growth opportunities.

Formación

• 5+ years of experience in application security or software engineering.
• Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Experience with source-to-sink validation and triage of security findings.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

Responsabilidades

• Run and tune SAST tooling in production environments.
• Triage individual security findings through source-to-sink validation.
• Manage false positives and document true vs false determinations.

Conocimientos

Security triage

English fluency

Threat modeling

Dev collaboration

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is hiring an Application Security Engineer to operate SAST tooling in production, triaging findings and reducing noise. You will work with Checkmarx or equivalent tools, collaborating with development teams to remediate vulnerabilities, and continuously refine configurations.

The role offers 100% remote work, competitive compensation in USD or local currency, and a supportive environment with mentorship and growth opportunities.