Remote AppSec Engineer: Secure Coding & SDLC

BairesDev; Comisión de Fomento de Perú; Remote; ARS 170,334,000 - 247,759,000; Full time

Benefits offered by this job

100% remote work (from anywhere)

Competitive USD compensation

Hardware and software setup for home

Flexible hours

Paid parental leaves, vacations, and H

Job summary

BairesDev is seeking an AppSec Engineer to perform secure code reviews, threat modeling, and implement security testing within CI/CD pipelines. You will mentor developers on secure coding practices and align with OWASP standards.

The role is 100% remote, offering competitive compensation in USD or local currency, with flexible hours and a globally distributed team focused on top-tier security outcomes.

Qualifications

• 4+ years in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.

Responsibilities

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

Skills

Threat modeling

Secure code review

SAST/DAST

OWASP Top 10

SDLC security

English proficiency

Tools

Semgrep

SonarQube

Snyk

OWASP ZAP

Job description

BairesDev is seeking an AppSec Engineer to perform secure code reviews, threat modeling, and implement security testing within CI/CD pipelines. You will mentor developers on secure coding practices and align with OWASP standards.

The role is 100% remote, offering competitive compensation in USD or local currency, with flexible hours and a globally distributed team focused on top-tier security outcomes.