Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to join its fully remote, global team. The role focuses on hands‑on static application security testing (SAST) triage, ensuring that security findings are accurately evaluated and remediated across the product portfolio.

Key responsibilities

• Perform daily SAST triage, reviewing findings and determining their validity.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on real codebases.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Fine‑tune static analysis tools and manage false‑positive rates across multiple products.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to analyze data flow from source to sink and conduct secure code reviews.
• Experience using SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Capability to produce audit‑traceable documentation in compliance‑driven settings.
• Advanced proficiency in English.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere
• Competitive compensation in USD or local currency
• Provided hardware and software for home office
• Flexible schedule
• Paid parental leave, vacations, and holidays
• Mentorship, promotion pathways, and skill‑development programs