Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to lead hands‑on static analysis triage for its global product portfolio. This fully remote position focuses on deep SAST expertise, evidence‑based decision making, and direct impact on how security risk is understood and remediated.

Key responsibilities

• Perform daily hands‑on SAST triage, reviewing findings and tracing data flow through code.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document disposition of findings with audit‑traceable evidence in regulated environments.
• Fine‑tune static analysis tools to reduce false‑positive rates.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience producing audit‑traceable documentation in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) tools: Checkmarx, Fortify, Veracode, Coverity.
• Source‑to‑sink data‑flow analysis.
• Secure code review techniques.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.