Product Security Engineer: Hands-On SAST & Code Review

BairesDev; Región de Valparaíso; Presencial; CLP 100.548.000 - 155.393.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

USD compensation

Hardware provided

Flexible hours

Parental leave

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to join its remote-first security team. The role focuses on hands-on SAST triage, secure code review, and data-flow analysis across real codebases to drive remediation with evidence-backed disposition in a regulated setting.

You'll collaborate with engineering teams worldwide, operate leading SAST tools (Checkmarx, Fortify, Veracode, Coverity), and document findings audit-traceably. English proficiency is essential for global collaboration.

Formación

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Proven track record of hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced proficiency in English.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

Hands-on security

SAST triage

Source-to-sink analysis

Secure code review

Audit-traceable documentation

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking a Product Security Engineer to join its remote-first security team. The role focuses on hands-on SAST triage, secure code review, and data-flow analysis across real codebases to drive remediation with evidence-backed disposition in a regulated setting.

You'll collaborate with engineering teams worldwide, operate leading SAST tools (Checkmarx, Fortify, Veracode, Coverity), and document findings audit-traceably. English proficiency is essential for global collaboration.