Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer who lives and breathes static application security testing (SAST). In this fully remote position you will be the primary triage expert, turning raw findings into actionable security decisions that directly influence product risk management.

Key responsibilities

• Perform hands‑on SAST triage as the core daily activity.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across real codebases.
• Document disposition of findings with evidence‑based reports in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage, not just tool integration.
• Strong expertise in source‑to‑sink data‑flow analysis and secure code review.
• Experience using SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of finding dispositions in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.