SAST Engineer

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

SAST Engineer at BairesDev

In this role, static analysis is your professional identity, not just one tool in a broader security toolkit. You'll tune rules, write custom queries, and operate SAST engines with the depth of someone who lives in the analysis layer day to day. Whether your background is vendor-native or hands-on in production environments, you bring the precision to surface real vulnerabilities and the expertise to improve the engine itself. This is your opportunity to apply dedicated static analysis experience where it matters most, directly shaping the quality and reliability of application security findings at scale.

What You'll Do:

• Operate and tune SAST tools, including rule customization and custom query development.
• Perform in-depth triage of static analysis findings through source-to-sink validation.
• Manage false positives and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve static analysis configurations and coverage.

What we are looking for:

• 5+ years of dedicated experience in static analysis or application security.
• Deep hands-on experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity, including rule tuning and custom query development.
• Strong source-to-sink validation skills and security finding triage experience.
• Ability to distinguish true from false positives and document reasoning clearly.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred.
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.