Product Security Engineer - Remote Work

INDI Staffing Services; Colombia; Híbrido; COP 90.000.000 - 140.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexibility in where/how you work

Personalized compensation

Tech-driven tools

Autonomous workflow

Generous leave policies

Diversity & Inclusion

Collaborative growth

Descripción de la vacante

INDI Staffing Services is seeking a Product Security Engineer who will perform hands-on SAST triage, conduct secure code reviews, and document findings in a regulated environment. You will tune static analysis tools and collaborate with engineering teams to remediate confirmed vulnerabilities.

The role requires 5+ years in product security or related fields and an advanced English proficiency. Flexible work approach promises autonomy, with opportunities for growth and collaboration with industry

Formación

• 5+ years hands-on experience in product security, application security, or software engineering with a security focus.
• Proven SAST triage beyond tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Advanced level of English communication in audit-driven environments.

Responsabilidades

• Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conducting source-to-sink analysis and secure code review across real codebases.
• Dispositioning findings with evidence-based documentation in a regulated environment.
• Tuning static analysis tools and managing false positive rates across the product portfolio.
• Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

Product Security

SAST Triage

Code Analysis

SAST Tools

Documentation

English Proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

Overview of the role

The Product Security Engineer role centers on hands-on static analysis triage rather than security architecture, DevSecOps pipeline ownership, or vulnerability program management. This is an opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of triage directly shapes how risk is understood and remediated across the product.

Key responsibilities

• Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conducting source-to-sink analysis and secure code review across real codebases.
• Dispositioning findings with evidence-based documentation in a regulated environment.
• Tuning static analysis tools and managing false positive rates across the product portfolio.
• Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Requirements

• Product Security: 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
• SAST Triage: Proven track record beyond tool integration or pipeline configuration.
• Code Analysis: Strong source-to-sink data flow analysis and secure code review skills.
• SAST Tools: Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Documentation: Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Language Proficiency: Advanced level of English.

Benefits:

• Flexibility: Choose where and how you work for enhanced creativity and innovation.
• Tailored Compensation: Personalize your earnings to suit your financial goals.
• Tech-Driven Tools: Access cutting-edge resources for seamless collaboration and productivity.
• Autonomous Workflow: Take control of your schedule to achieve work-life balance.
• Well-being: Enjoy generous leave policies for rest and rejuvenation.
• Diversity & Inclusion: Thrive in a diverse and inclusive environment.
• Collaboration: Engage with industry leaders for collective growth.
• Development: Access mentorship and growth opportunities for continuous advancement.