AppSec Engineer - Remote Work

BairesDev; Comisión de Fomento de Perú; Remote; ARS 170.334.000 - 247.759.000; Vollzeit

Benefits dieser Stelle

100% remote work (from anywhere)

Competitive USD compensation

Hardware and software setup for home

Flexible hours

Paid parental leaves, vacations, and H

Zusammenfassung

BairesDev is seeking an AppSec Engineer to perform secure code reviews, threat modeling, and implement security testing within CI/CD pipelines. You will mentor developers on secure coding practices and align with OWASP standards.

The role is 100% remote, offering competitive compensation in USD or local currency, with flexible hours and a globally distributed team focused on top-tier security outcomes.

Qualifikationen

• 4+ years in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.

Aufgaben

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

Kenntnisse

Threat modeling

Secure code review

SAST/DAST

OWASP Top 10

SDLC security

English proficiency

Tools

Semgrep

SonarQube

Snyk

OWASP ZAP

Jobbeschreibung

AppSec Engineer at BairesDev

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

What You'll Do:

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

What we are looking for:

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure software development lifecycle (SDLC) practices.
• Strong background in identifying and remediating vulnerabilities within web applications and APIs.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.