Product Security Engineer — Remote & Flexible Hours

BairesDev; Colombia; A distancia; COP 281.171.000 - 406.136.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD salary

Home office setup provided

Flexible hours

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to strengthen the security posture of our application-layer infrastructure. You will bridge security standards with software development to build robust defenses from the earliest stages of the lifecycle.

As part of a 100% remote, global team, you will collaborate with engineering squads, apply OWASP Top 10 practices, and guide secure coding across the SDLC while enjoying flexible hours.

Formación

• 4+ years in Application Security, Product Security, or Software Engineering.
• Proven experience with threat modeling and secure code reviews.
• Hands-on with SAST/DAST tools and secure SDLC practices.

Responsabilidades

• Perform comprehensive threat modeling to identify attack vectors in application architectures.
• Execute manual and automated secure code reviews to remediate vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain continuous security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on OWASP Top 10.
• Guide the implementation of security controls to ensure product resilience and data protection.

Conocimientos

Threat modeling

Secure code reviews

SAST/DAST tooling

OWASP Top 10

SDLC security

English proficiency

Security tooling

Herramientas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descripción del empleo

BairesDev is seeking a Product Security Engineer to strengthen the security posture of our application-layer infrastructure. You will bridge security standards with software development to build robust defenses from the earliest stages of the lifecycle.

As part of a 100% remote, global team, you will collaborate with engineering squads, apply OWASP Top 10 practices, and guide secure coding across the SDLC while enjoying flexible hours.