Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer to lead hands‑on static application security testing (SAST) triage for our global product portfolio. The role is fully remote and focuses on analysing findings, tracing data flows through code, and making evidence‑based decisions that drive risk remediation.

Key responsibilities

• Perform daily hands‑on SAST triage and prioritize findings.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document disposition of findings with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience using SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Capability to produce audit‑traceable documentation of finding dispositions in compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST
• Source‑to‑sink analysis
• Secure code review

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.