Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer to join BairesDev’s global team. The position is fully remote and focuses on hands‑on static analysis triage, turning raw findings into actionable security decisions that protect our customers’ products.

Key responsibilities

• Perform daily SAST triage, reviewing and validating findings from static analysis tools.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across production codebases.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Fine‑tune SAST tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to confirm vulnerabilities and drive remediation.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Demonstrated expertise in SAST triage rather than just tool integration.
• Strong ability to perform source‑to‑sink analysis and secure code review.
• Experience using SAST platforms such as Checkmarx, Fortify, Veracode or Coverity at the findings level.
• Proven track record of producing audit‑ready documentation of finding dispositions.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100 % remote work from any location.
• Competitive compensation in USD or local currency.
• Company‑provided hardware and software for home office.
• Flexible scheduling and self‑managed hours.
• Paid parental leave, vacation and holidays.
• Access to a multicultural team of top‑tier talent and continuous mentorship.