Product Security Engineer – Remote

About the role

BairesDev is seeking a Product Security Engineer to focus on hands‑on static application security testing (SAST) triage. This fully remote position requires deep expertise in analyzing findings, tracing data flow through code, and making evidence‑based decisions that influence risk remediation across the product portfolio.

Key responsibilities

• Perform daily hands‑on SAST triage as the primary activity.
• Conduct source‑to‑sink analysis and secure code reviews on real codebases.
• Document disposition of findings with audit‑traceable evidence in regulated environments.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Strong source‑to‑sink data‑flow analysis and secure code review capabilities.
• Experience operating SAST tools at the findings level.
• Ability to produce audit‑traceable documentation of finding dispositions in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• SAST (Static Application Security Testing)
• Source‑to‑sink data‑flow analysis
• Secure code review

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and holidays.
• Innovative, multicultural environment with mentorship, promotions, and skill‑development opportunities.