Senior Security Engineer - Remote Work | REF#306601

BairesDev; Minas Gerais; Remote; BRL 804,000 - 1,126,000; Full time

Benefits offered by this job

Remote work worldwide

Competitive USD pay

Hardware provided

Flexible hours

Parental leave & holidays

Mentorship & growth

Job summary

BairesDev is seeking a Senior Security Engineer to lead security across cloud-native services, designing hardened container images and securing Kubernetes workloads at scale. You will build Go-based security automation and work directly with engineering teams through Git PR workflows, patching code rather than just flagging issues.

You will apply SCA, SAST, DAST triage, and CI/CD hardening, IaC templates, Helm charts, and third-party dependencies.

Qualifications

• 5+ years of software engineering with a security focus.
• Strong proficiency in Go for security automation tooling.
• Experience securing container workloads and Kubernetes at scale.
• Proficiency with Terraform, CI/CD hardening, and IaC templates.
• AWS cloud security, with Azure as a secondary platform.
• Familiarity with SCA/SAST/DAST and vulnerability triage.
• Advanced English communication.

Responsibilities

• Design hardened container base images and secure Kubernetes workloads.
• Develop Go-based security automation tooling.
• Lead vulnerability remediation with Git PR workflows and patches.
• Perform SCA, SAST, DAST triage from discovery to patch.
• Harden CI/CD pipelines, IaC templates, and Helm charts against risks.

Skills

Go security tooling

Kubernetes security

AWS security

Terraform

CI/CD hardening

SCA/SAST/DAST

English fluency

Tools

Artifactory/JFrog

Chainguard

Git workflows

Helm

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior Security Engineer at BairesDev

In this role, you'll drive supply chain and cloud-native security across hundreds of services, designing hardened container images and securing Kubernetes workloads at scale. Building Go-based security automation, you'll work directly with engineering teams through Git PR workflows, committing patches yourself rather than just flagging issues. This is your opportunity to be a strong coder first and a security expert second, applying sharp engineering judgment to distinguish good code from bad, AI-generated or otherwise.

What You'll Do

• Design hardened container base images and secure Kubernetes workloads.
• Build Go-based security automation tooling.
• Drive vulnerability remediation with engineering teams via Git PR workflows, including committing patches directly.
• Perform SCA, SAST, and DAST triage, taking vulnerabilities from discovery to patch.
• Harden CI/CD pipelines, IaC templates, and Helm charts against supply chain risks.

What We Are Looking For

• 5+ years of experience in software engineering with a security focus.
• Strong proficiency in Go for security automation tooling.
• Experience with container security, including hardened base images, Kubernetes runtime security, network policies, and admission controllers.
• Experience with SCA and large-scale dependency vulnerability remediation, including SAST, DAST, and triage to patch.
• Background in supply chain security, including CI/CD hardening, IaC templates, Helm charts, and third-party dependencies.
• Experience with Terraform for provisioning security controls.
• Experience with AWS cloud security, with Azure as a secondary platform, focused on container orchestration.
• Experience applying AI to security, such as LLMs or MCP for automated vulnerability fixing or alert grouping, or a strong conceptual understanding of these approaches.
• Advanced proficiency in English.

Nice To Have

• Experience with Node.js development.
• Familiarity with Artifactory or JFrog.
• Experience with zero-CVE container vendors such as Chainguard or similar.
• Knowledge of the OWASP Top 10.
• Familiarity with supply chain frameworks such as SLSA.
• Experience with FIPS compliance and cipher migration.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!