Product Security Engineer (Remote)

About the role

Join BairesDev as a Product Security Engineer and focus exclusively on hands‑on static application security testing (SAST) triage. You will work remotely, analysing real codebases, validating findings, and shaping how security risk is understood across the product portfolio.

Key responsibilities

• Perform daily SAST triage, reviewing findings and determining true security issues.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on production code.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across multiple products.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to analyse source‑to‑sink data flows and conduct secure code reviews.
• Experience using SAST platforms such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Capability to produce audit‑traceable documentation of findings disposition.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Static Application Security Testing (SAST)
• Source‑to‑sink data‑flow analysis
• Secure code review

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.