Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer to join our fully remote team. The focus of the role is hands‑on static application security testing (SAST) triage, where you will analyse findings, trace data flow through code and make evidence‑based decisions that drive risk remediation across our product portfolio.

Key responsibilities

• Perform daily SAST triage as the primary activity, reviewing and validating findings.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on real codebases.
• Document disposition of findings with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across multiple products.
• Collaborate with engineering teams to confirm vulnerabilities and guide remediation.

Required profile

• 5+ years of experience in product security, application security or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to analyse source‑to‑sink data flows and conduct secure code reviews.
• Experience producing compliance‑driven documentation of finding dispositions.
• Advanced proficiency in English.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100 % remote work from any location.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations and national holidays.
• Multicultural environment with mentorship, career growth and skill‑development opportunities.