Product Security Engineer - Remote Work | REF#298280

BairesDev; Bogotá; A distancia; COP 281.171.000 - 437.377.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD compensation

Home setup provided

Flexible hours

Parental leave and holidays

Mentorship and growth opportunities

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document findings with audit-friendly evidence in a compliance-driven environment and work with engineering teams to drive remediation of confirmed vulnerabilities.

The role emphasizes deep static analysis, risk assessment, and cross-functional collaboration while enabling remote work and competitive compensation in USD.

Formación

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced proficiency in English.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Source-to-sink analysis

Secure code review

Audit documentation

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Product Security Engineer at BairesDev

In this role, the defining skill is hands-on static analysis triage, not security architecture, not DevSecOps pipeline ownership, and not vulnerability program management. If your product security work means you personally read findings, trace data flow through code, and make evidence-based decisions on what is real, this role is built for you. This is your opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of your triage directly shapes how risk is understood and remediated across the product.

What You'll Do

• Perform hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

What We Are Looking For

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Proven track record of hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!