AppSec Engineer at BairesDev

In this role, the core of your day is dedicated SAST triage, secure code review, and source‑to‑sink validation — not pipeline integration, not program management, not architecture.

You will operate SAST tooling hands‑on, read individual findings, and make the call on what is real. This is your opportunity to do deep, focused analysis work where technical precision and security judgment directly protect production systems.

What You'll Do

• Perform dedicated SAST triage, evaluating individual findings through source‑to‑sink validation.
• Operate and tune SAST tools in production environments.
• Conduct secure code review and document true versus false positive determinations.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Improve analysis signal quality by reducing noise and refining rule configurations.

Qualifications

• ...