Product Security Engineer - Remote Work

BairesDev; São Paulo; Remote; BRL 483,000 - 643,000; Full time

Benefits offered by this job

Remote work (100% from anywhere)

Excellent compensation in USD

Hardware and software setup for home

Flexible hours

Paid parental leaves, vacations, and |

Mentorship and growth opportunities

Job summary

BairesDev is seeking a Product Security Engineer to strengthen application-layer security. You will bridge security standards with software development, ensuring robust defenses from the earliest lifecycle stages.

You will model threats, review code, manage SAST/DAST tooling, and help embed secure SDLC practices across engineering teams. English proficiency is essential for global collaboration.

Qualifications

• 4+ years of experience in Application Security, Product Security, or Software Engineering.
• Proven expertise in threat modeling and conducting secure code reviews.
• Hands-on experience with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Proficiency in identifying and mitigating application-layer security vulnerabilities.
• Advanced proficiency in English.

Responsibilities

• Perform comprehensive threat modeling to identify attack vectors in application architectures.
• Execute manual and automated secure code reviews to remediate vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on industry benchmarks like the OWASP Top 10.
• Guide the implementation of security controls to ensure product resilience and data protection.

Skills

Threat modeling

Secure code reviews

SAST and DAST tooling

OWASP Top 10 knowledge

SDLC practices

English proficiency

Tools

Semgrep

SonarQube

Snyk

OWASP ZAP

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Product Security Engineer at BairesDev

As a Product Security Engineer, you will focus on strengthening the security posture of application-layer infrastructure. You will act as a key link between security standards and software development, ensuring that products are built with robust defenses against evolving threats from the earliest stages of the lifecycle.

What You'll Do:

• Perform comprehensive threat modeling to identify potential attack vectors in application architectures.
• Execute manual and automated secure code reviews to detect and remediate vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain continuous security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on industry benchmarks like the OWASP Top 10.
• Guide the implementation of security controls to ensure product resilience and data protection.

What we are looking for:

• 4+ years of experience in Application Security, Product Security, or Software Engineering.
• Proven expertise in threat modeling and conducting secure code reviews.
• Hands-on experience with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure software development lifecycle (SDLC) practices.
• Proficiency in identifying and mitigating application-layer security vulnerabilities.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.