Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer to lead hands‑on static application security testing (SAST) triage for our global product portfolio. The role is fully remote and focuses on analysing findings, tracing data flows through code, and making evidence‑based decisions that drive risk remediation.

Key responsibilities

• Perform daily SAST triage as the primary activity, reviewing and validating findings.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document disposition of findings with audit‑traceable evidence in regulated environments.
• Fine‑tune static analysis tools and manage false‑positive rates across the product suite.
• Collaborate with engineering teams to confirm vulnerabilities and guide remediation.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to analyse data‑flow from source to sink and conduct secure code reviews.
• Experience producing compliance‑driven documentation of finding dispositions.
• Advanced proficiency in English.

Required skills

• Static analysis tools such as Checkmarx, Fortify, Veracode, or Coverity.
• SAST triage and findings management.
• Source‑to‑sink data‑flow analysis.
• Secure code review techniques.

What we offer

• 100 % remote work from any location.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for a home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Multicultural environment with mentorship, promotion pathways, and skill‑development opportunities.