Hands-on Product Security Engineer: SAST Triager, Remote

BairesDev; Montes de María; A distancia; COP 374.895.000 - 562.342.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

USD or local currency compensation

Hardware provided for home setup

Flexible hours

Parental leave & holidays

Descripción de la vacante

BairesDev, a global technology partner, is seeking a Product Security Engineer to apply deep static analysis and triage. You will focus on hands-on SAST triage, reviewing real codebases, and delivering evidence-based findings in a regulated environment.

You’ll work 100% remotely with flexible hours, competitive USD compensation or local currency, and a supportive, multicultural team. Experience with Checkmarx, Fortify, Veracode, or Coverity is preferred.

Formación

• Hands-on security experience required.
• Experience performing SAST triage on real codebases.
• Strong ability to document findings with audit-traceable evidence.
• Advanced English communication skills.

Responsabilidades

• Perform hands-on SAST triage as daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Static analysis

Source-to-sink analysis

Secure code review

Audit documentation

English proficiency

Hands-on security

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev, a global technology partner, is seeking a Product Security Engineer to apply deep static analysis and triage. You will focus on hands-on SAST triage, reviewing real codebases, and delivering evidence-based findings in a regulated environment.

You’ll work 100% remotely with flexible hours, competitive USD compensation or local currency, and a supportive, multicultural team. Experience with Checkmarx, Fortify, Veracode, or Coverity is preferred.