Application Security Engineer - Remote Work

BairesDev; Santa Catarina; Remote; BRL 554,000 - 755,000; Full time

Job summary

BairesDev in Brazil (Remote) is seeking an Application Security Engineer to strengthen our security posture across the development lifecycle. You will conduct security assessments, implement controls, and work with engineering teams to build resilient applications.

You’ll leverage SAST/DAST, threat modeling, and secure coding practices, while communicating in English and contributing to CI/CD security, cloud and container security, and staying ahead of OWASP Top 10 threats.

Qualifications

• 4+ years of experience in application security or related cybersecurity roles.
• Strong understanding of common vulnerabilities (OWASP Top 10) and secure coding practices.
• Experience with security testing tools and methodologies (SAST, DAST, penetration testing).
• Knowledge of secure software development lifecycle (SDLC) practices.
• Experience with cloud security concepts and container security.
• Familiarity with security frameworks and compliance standards.
• Advanced level of English.

Responsibilities

• Conduct security assessments, penetration testing, and code reviews to identify vulnerabilities in applications.
• Design and implement security controls and best practices throughout the software development lifecycle.
• Collaborate with development teams to remediate security issues and promote secure coding practices.
• Develop and maintain security testing automation and integrate security tools into CI/CD pipelines.
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventive measures.
• Stay current with emerging security threats, vulnerabilities, and industry best practices.

Skills

OWASP Top 10

Penetration testing

Secure coding practices

CI/CD security tooling

Cloud security

Container security

English proficiency

Tools

SAST

DAST

Penetration testing tools

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Application Security Engineer at BairesDev

We are looking for an Application Security Engineer to strengthen our security posture by identifying vulnerabilities, implementing security controls, and ensuring the security of our applications throughout the development lifecycle. This role focuses on conducting security assessments, developing secure coding practices, and collaborating with development teams to build resilient systems. This is an excellent opportunity to make a significant impact on application security and advance your career in cybersecurity.

What You'll Do:

• Conduct security assessments, penetration testing, and code reviews to identify vulnerabilities in applications.
• Design and implement security controls and best practices throughout the software development lifecycle.
• Collaborate with development teams to remediate security issues and promote secure coding practices.
• Develop and maintain security testing automation and integrate security tools into CI/CD pipelines.
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventive measures.
• Stay current with emerging security threats, vulnerabilities, and industry best practices.

What we are looking for:

• 4+ years of experience in application security or related cybersecurity roles.
• Strong understanding of common vulnerabilities (OWASP Top 10) and secure coding practices.
• Experience with security testing tools and methodologies (SAST, DAST, penetration testing).
• Knowledge of secure software development lifecycle (SDLC) practices.
• Experience with cloud security concepts and container security.
• Familiarity with security frameworks and compliance standards.
• Advanced level of English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred.
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.