Product Security Engineer - Remote Work

INDI Staffing Services; Belo Horizonte; Híbrido; BRL 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible work location

Personalized compensation

Autonomous schedule

Generous leave policies

Diversity & Inclusion

Mentorship and growth

Resumo da oferta

INDI Staffing Services is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews. You will analyze code across real codebases, document findings with evidence, and tune tools to minimize false positives.

You will partner with engineering teams to drive remediation in a fast-paced, compliance-driven environment. Strong English skills are required and flexible work options are available.

Qualificações

• 5+ years of hands-on experience in product security or software engineering with security focus.
• Proven track record in SAST triage beyond tool integration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience using Checkmarx, Fortify, Veracode, or Coverity at findings level.
• Audit-traceable documentation skills for compliance-driven environments.
• Advanced level of English.

Responsabilidades

• Performing hands-on SAST triage as the primary daily activity.
• Conducting source-to-sink analysis and secure code review across real codebases.
• Dispositioning findings with evidence-based documentation.
• Tuning static analysis tools and managing false positives.
• Partnering with engineering teams to drive remediation of vulnerabilities.

Conhecimentos

SAST triage

Secure code review

Source-to-sink analysis

Audit documentation

English proficiency

Ferramentas

Checkmarx

Fortify

Veracode

Coverity

Descrição da oferta de emprego

At INDI, we're passionate about empowering individuals and businesses worldwide. Our cutting-edge recruiters connect leading companies with top talent, fostering a dynamic environment where innovation thrives. Join us in shaping the future of work.

Overview of the role

The Product Security Engineer role centers on hands-on static analysis triage rather than security architecture, DevSecOps pipeline ownership, or vulnerability program management. This is an opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of triage directly shapes how risk is understood and remediated across the product.

Key responsibilities

• Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.


• Conducting source-to-sink analysis and secure code review across real codebases.


• Dispositioning findings with evidence-based documentation in a regulated environment.


• Tuning static analysis tools and managing false positive rates across the product portfolio.


• Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Requirements

• Product Security: 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.


• SAST Triage: Proven track record beyond tool integration or pipeline configuration.


• Code Analysis: Strong source-to-sink data flow analysis and secure code review skills.


• SAST Tools: Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.


• Documentation: Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.


• Language Proficiency: Advanced level of English.


• Flexibility: Choose where and how you work for enhanced creativity and innovation.


• Tailored Compensation: Personalize your earnings to suit your financial goals.


• Tech-Driven Tools: Access cutting-edge resources for seamless collaboration and productivity.


• Autonomous Workflow: Take control of your schedule to achieve work-life balance.


• Well-being: Enjoy generous leave policies for rest and rejuvenation.


• Diversity & Inclusion: Thrive in a diverse and inclusive environment.


• Collaboration: Engage with industry leaders for collective growth.


• Development: Access mentorship and growth opportunities for continuous advancement.