Remote SAST Engineer (Checkmarx) — AppSec Triage Expert

BairesDev; Venezuela; Presencial; VES 69.552.000 - 108.192.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

USD compensation

Home hardware

Flexible schedule

Parental leave

Paid vacations

Global team

Career growth

Descripción de la vacante

BairesDev is seeking an experienced Application Security Engineer to operate SAST tooling in production, tune Checkmarx or equivalent, and validate findings. You will work hands-on with developers to remediate vulnerabilities and continuously improve configurations.

This fully remote role offers 100% work from anywhere, competitive compensation in USD or local currency, hardware and software setup for home work, and flexible hours to create your own schedule.

Formación

• 5+ years of experience in application security or software engineering.
• Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Experience with source-to-sink validation and triage of security findings.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

Responsabilidades

• Run and tune SAST tooling in production environments.
• Triage individual security findings through source-to-sink validation.
• Manage false positives and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and improve signal quality.

Conocimientos

SAST tooling

Security triage

English proficiency

Dev collaboration

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking an experienced Application Security Engineer to operate SAST tooling in production, tune Checkmarx or equivalent, and validate findings. You will work hands-on with developers to remediate vulnerabilities and continuously improve configurations.

This fully remote role offers 100% work from anywhere, competitive compensation in USD or local currency, hardware and software setup for home work, and flexible hours to create your own schedule.