Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to join its fully remote team. You will focus on hands‑on static application security testing (SAST) triage, analyzing findings, tracing data flow through code, and making evidence‑based decisions that directly influence product risk management.

Key responsibilities

• Perform daily hands‑on SAST triage as the primary activity.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document disposition of findings with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage at the findings level.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience working in compliance‑driven or regulated environments.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) tools such as Checkmarx, Fortify, Veracode, or Coverity.
• Source‑to‑sink data‑flow analysis.
• Secure code review.

What we offer

• 100% remote work from anywhere.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for home office.
• Flexible hours – create your own schedule.
• Paid parental leave, vacation and holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.