Product Security Engineer (Remote)

About the role

BairesDev is looking for a Product Security Engineer who will focus on hands‑on static application security testing (SAST) triage. You will work remotely, analysing real codebases, validating findings and helping engineering teams remediate vulnerabilities.

Key responsibilities

• Perform daily SAST triage, reviewing and prioritising findings.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across production code.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage, not just tool integration.
• Strong ability to analyse source‑to‑sink data flows and conduct secure code reviews.
• Experience using SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of findings dispositions in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations and holidays.
• Mentorship, promotion pathways and skill‑development opportunities.