Product Security Engineer – Remote

About the role

BairesDev® is seeking a Product Security Engineer who will focus on hands‑on static analysis triage. You will work remotely, reviewing real codebases, validating findings, and influencing how risk is understood across our product portfolio.

Key responsibilities

• Perform daily SAST triage, analyzing and dispositioning findings.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on production code.
• Document evidence‑based decisions in a regulated, audit‑traceable manner.
• Tune static analysis tools and manage false‑positive rates.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a security focus.
• Proven track record of hands‑on SAST triage rather than just tool integration.
• Strong ability to perform source‑to‑sink analysis and secure code review.
• Experience producing audit‑traceable documentation in compliance‑driven environments.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST) triage.
• Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Source‑to‑sink data‑flow analysis.
• Secure code review.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and holidays.
• Mentorship, promotion pathways, and skill‑development opportunities.