Product Security Engineer - Remote Work

About the role

We are looking for a Product Security Engineer who lives and breathes hands‑on static analysis triage. In this fully remote position you will directly influence how security risks are identified, documented, and remediated across our product portfolio.

Key responsibilities

• Perform daily SAST triage, reviewing findings and tracing data flow from source to sink.
• Conduct secure code reviews on real codebases and produce evidence‑based disposition documentation.
• Tune static analysis tools to reduce false‑positive rates and improve detection quality.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a strong hands‑on focus.
• Proven track record of performing SAST triage at the findings level.
• Ability to produce audit‑traceable documentation in compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Source‑to‑sink data‑flow analysis.
• Secure code review techniques.

What we offer

• 100% remote work from any location.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible hours and the ability to create your own schedule.
• Paid parental leave, vacations, and national holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.