Product Security Engineer (Remote)

About the role

Join BairesDev as a Product Security Engineer and focus on hands‑on static analysis triage. You will work remotely, reviewing real codebases, tracing data flows, and making evidence‑based decisions that directly influence product risk management.

Key responsibilities

• Perform daily SAST triage, analyzing findings and determining their validity.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across multiple codebases.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Fine‑tune static analysis tools to reduce false‑positive rates.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a strong security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Ability to produce compliant, audit‑ready documentation of findings.
• Advanced proficiency in English.

Required skills

• Experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Strong source‑to‑sink data‑flow analysis capabilities.
• Secure code review expertise.

What we offer

• 100% remote work from any location.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for home office setup.
• Flexible schedule and paid parental leave, vacation, and holidays.
• Access to a multicultural team of top‑tier talent and opportunities for mentorship, promotion, and skill development.