Product Security Engineer – Remote

About the role

INDI is looking for a Product Security Engineer to lead hands‑on static application security testing (SAST) triage. This remote position focuses on analyzing real codebases, documenting findings, and driving remediation in a regulated environment.

Key responsibilities

• Perform daily SAST triage as the primary activity, reviewing and validating findings.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across multiple product codebases.
• Document disposition of findings with evidence‑based reports compliant with audit requirements.
• Tune static analysis tools to reduce false‑positive rates and improve detection accuracy.
• Collaborate with engineering teams to confirm vulnerabilities and guide remediation efforts.

Required profile

• 5+ years of hands‑on experience in product security, application security, or software engineering with a security focus.
• Proven track record in SAST triage beyond tool integration or pipeline configuration.
• Strong ability to produce audit‑traceable documentation in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST)
• Secure code review
• Source‑to‑sink data‑flow analysis
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• Flexible remote work environment.
• Tailorable compensation package.
• Access to cutting‑edge security tools.
• Autonomous schedule for work‑life balance.
• Generous leave policies.
• Diverse and inclusive culture.
• Collaboration with industry leaders.
• Mentorship and continuous development opportunities.