Application Security Engineer (Checkmarx / SAST) - Remote Work | REF#298332

BairesDev; United States; A distancia; MXN 1.531.000 - 2.212.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Flexible hours

Paid parental leave

Global team

Descripción de la vacante

BairesDev in Mexico offers a fully remote Application Security Engineer role focused on production SAST work. You will operate Checkmarx or equivalent tools, tune configurations, and triage findings to separate real vulnerabilities from noise.

You will partner with development teams to remediate confirmed issues, document decisions, and continuously improve signal quality. The position emphasizes hands-on expertise and clear communication in English, with generous remote-friendly benefits.

Formación

• 5+ years in application security or software engineering.
• Hands-on experience with SAST tools (Checkmarx, Fortify, Veracode, Coverity).
• Proficiency in English; able to document findings clearly.

Responsabilidades

• Run and tune SAST tooling in production.
• Triage findings via source-to-sink validation.
• Collaborate with developers to remediate vulnerabilities.
• Improve SAST configurations to reduce noise.

Conocimientos

SAST tooling

Vulnerability triage

Cross-functional collaboration

Technical English

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Application Security Engineer (Checkmarx / SAST) at BairesDev

In this role, you'll operate SAST tooling in production day to day, running and tuning Checkmarx or equivalent tools, managing false positives, and performing source-to-sink validation on individual findings. This is hands-on triage work, not program management, requiring the precision to distinguish real vulnerabilities from noise and the discipline to document every decision. This is your opportunity to be the technical expert who keeps application security grounded in real findings rather than metrics, directly shaping the security posture of production systems.

What You'll Do

• Run and tune SAST tooling in production environments.
• Triage individual security findings through source-to-sink validation.
• Manage false positives and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and improve signal quality.

What We Are Looking For

• 5+ years of experience in application security or software engineering.
• Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Experience with source-to-sink validation and triage of security findings.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!