SAST-Focused AppSec Engineer (Remote)

BairesDev; Antioquia; Presencial; COP 374.895.000 - 562.342.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work from anywhere

Competitive USD or local currency

Home-office setup provided

Flexible hours

Paid parental leave & holidays

Mentorship and growth opportunities

Descripción de la vacante

BairesDev is seeking an experienced AppSec Engineer to own SAST triage and secure code review. You will read findings, determine true positives, and collaborate with development teams to remediate vulnerabilities in production.

This 100% remote role offers flexible hours, a competitive USD or local-currency compensation, and a home-office setup. Join a global team committed to security, quality, and continuous learning.

Formación

• 5+ years of experience in application security with a strong focus on hands-on SAST triage.
• Deep experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Proven ability to perform source-to-sink validation and secure code review.
• Experience managing false positives and documenting security finding decisions with precision.
• Advanced proficiency in English.

Responsabilidades

• Perform dedicated SAST triage, evaluating individual findings through source-to-sink validation.
• Operate and tune SAST tools in production environments.
• Conduct secure code review and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Improve analysis signal quality by reducing noise and refining rule configurations.

Conocimientos

SAST triage

SAST tooling

Secure code review

False positives management

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking an experienced AppSec Engineer to own SAST triage and secure code review. You will read findings, determine true positives, and collaborate with development teams to remediate vulnerabilities in production.

This 100% remote role offers flexible hours, a competitive USD or local-currency compensation, and a home-office setup. Join a global team committed to security, quality, and continuous learning.