AppSec Engineer: Secure Coding & Threat Modeling (Remote)

BairesDev; Colombia; A distancia; COP 281.171.000 - 406.136.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

USD or local currency

Home office setup

Flexible hours

Parental leave

Paid vacations

Global team

Mentorship programs

Descripción de la vacante

BairesDev is seeking an AppSec Engineer to champion security across the application lifecycle. You will work remotely with a global team, guiding engineering teams on secure coding practices and vulnerability remediation.

The role emphasizes threat modeling, SAST/DAST integration, and OWASP-aligned SDLC practices, with a focus on maintaining development velocity while protecting applications and APIs. Strong English skills are essential.

Formación

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and SDLC security practices.
• Strong background in identifying and remediating vulnerabilities within web applications and APIs.
• Advanced proficiency in English.

Responsabilidades

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

Conocimientos

Application Security

Threat Modeling

SAST/DAST

OWASP Top 10

Secure SDLC

English

Herramientas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descripción del empleo

BairesDev is seeking an AppSec Engineer to champion security across the application lifecycle. You will work remotely with a global team, guiding engineering teams on secure coding practices and vulnerability remediation.

The role emphasizes threat modeling, SAST/DAST integration, and OWASP-aligned SDLC practices, with a focus on maintaining development velocity while protecting applications and APIs. Strong English skills are essential.