Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to join its global remote team. The role focuses on hands‑on static application security testing (SAST) triage, ensuring that security findings are accurately analyzed and remediated across the product portfolio.

Key responsibilities

• Perform daily hands‑on SAST triage, reviewing findings directly.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on real codebases.
• Document disposition decisions with evidence in a regulated, audit‑traceable manner.
• Tune static analysis tools and manage false‑positive rates across multiple products.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a strong security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Deep expertise in source‑to‑sink data‑flow analysis and secure code review.
• Experience using SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation in compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Static Application Security Testing (SAST)
• Source‑to‑sink data‑flow analysis
• Secure code review

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.