Hands-On SAST Security Engineer — Remote & Flexible

BairesDev; Bogotá; A distancia; COP 281.171.000 - 437.377.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD compensation

Home setup provided

Flexible hours

Parental leave and holidays

Mentorship and growth opportunities

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document findings with audit-friendly evidence in a compliance-driven environment and work with engineering teams to drive remediation of confirmed vulnerabilities.

The role emphasizes deep static analysis, risk assessment, and cross-functional collaboration while enabling remote work and competitive compensation in USD.

Formación

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced proficiency in English.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Source-to-sink analysis

Secure code review

Audit documentation

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document findings with audit-friendly evidence in a compliance-driven environment and work with engineering teams to drive remediation of confirmed vulnerabilities.

The role emphasizes deep static analysis, risk assessment, and cross-functional collaboration while enabling remote work and competitive compensation in USD.