Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to lead hands‑on static analysis triage for its global product portfolio. The role focuses on reviewing findings, tracing data flow through code, and making evidence‑based decisions that directly influence risk remediation.

Key responsibilities

• Perform daily SAST triage as the primary activity, reviewing and dispositioning findings.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document evidence‑based dispositions in a regulated, audit‑traceable manner.
• Fine‑tune static analysis tools and manage false‑positive rates across the product suite.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of SAST triage, not just tool integration.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience producing audit‑traceable documentation in compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) tools: Checkmarx, Fortify, Veracode, Coverity.
• Source‑to‑sink data‑flow analysis.
• Secure code review.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.