Product Security Engineer – Remote

About the role

BairesDev is looking for a Product Security Engineer who will focus on hands‑on static application security testing (SAST) triage. You will work remotely, analysing findings, tracing data flows through code, and providing evidence‑based decisions that shape risk remediation across the product portfolio.

Key responsibilities

• Perform daily SAST triage as the primary activity.
• Conduct source‑to‑sink analysis and secure code reviews on real codebases.
• Document disposition of findings with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage, not just tool integration.
• Strong ability to analyse data‑flow and conduct secure code reviews.
• Experience producing audit‑traceable documentation in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity
• Audit‑traceable documentation

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacation and holidays.
• Multicultural environment with mentorship, promotions and skill development.