AppSec Engineer - Remote Work

BairesDev; Brasil; Teletrabalho; BRL 329 000 - 493 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work

Competitive USD or local pay

Home office setup provided

Flexible hours

Parental leave

Diversity & growth opportunities

Resumo da oferta

BairesDev, a leading global tech services company, is seeking an AppSec Engineer to join our 100% remote team. You will perform secure code reviews, threat modeling, and integrate security tests into CI/CD pipelines.

You will mentor developers, stay ahead of the OWASP Top 10, and work with Semgrep, SonarQube, Snyk, and OWASP ZAP to secure web apps and APIs across projects.

Qualificações

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of OWASP Top 10 and secure software development lifecycle (SDLC) practices.
• Strong background in identifying and remediating vulnerabilities within web applications and APIs.
• Advanced proficiency in English.

Responsabilidades

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

Conhecimentos

Threat modeling

Secure coding practices

CI/CD security

English communication

Ferramentas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descrição da oferta de emprego

AppSec Engineer at BairesDev

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

What You'll Do:

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

What we are looking for:

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure software development lifecycle (SDLC) practices.
• Strong background in identifying and remediating vulnerabilities within web applications and APIs.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.