Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer who will focus exclusively on hands‑on static analysis triage. You will work remotely, reviewing real codebases, tracing data flows, and making evidence‑based decisions that directly influence how risk is understood and mitigated across our products.

Key responsibilities

• Perform daily SAST triage as the primary activity.
• Conduct source‑to‑sink analysis and secure code reviews on production code.
• Document finding dispositions with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage, not just tool integration.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience with SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of dispositions in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity
• Audit‑traceable documentation

What we offer

• 100% remote work from anywhere
• Competitive compensation in USD or local currency
• Hardware and software setup for home office
• Flexible hours and self‑managed schedule
• Paid parental leave, vacations, and national holidays
• Multicultural environment with top‑tier global talent
• Mentorship, promotion pathways, and continuous skill development