Remote App Security Engineer | Secure SDLC Innovator

BairesDev; Colombia; A distancia; COP 281.171.000 - 406.136.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote

USD or local currency

Hardware provided

Flexible hours

Paid leaves & holidays

Mentorship & growth

Global Top 1% team

Descripción de la vacante

BairesDev, a leader in technology solutions with 15+ years of experience, offers 100% remote roles and a global Top 1% talent network. We are seeking an Application Security Engineer to identify and mitigate vulnerabilities across our software applications and embed security across the SDLC.

You will review code, run SAST/DAST, mentor developers on OWASP standards, and integrate security testing into CI/CD pipelines while collaborating with engineering teams.

Formación

• 4+ years in Application Security, Cyber Security, or Software Engineering.
• Experience with SAST/DAST tools and secure coding practices.
• Strong knowledge of OWASP standards and secure code reviews.
• Experience coaching developers on secure coding practices and mitigation techniques.
• Understanding of SDLC security automation; threat modeling a plus.
• Advanced English proficiency.

Responsabilidades

• Perform secure code reviews and architectural assessments to identify threats.
• Execute and manage SAST/DAST to detect vulnerabilities.
• Coach developers on secure coding practices and OWASP standards.
• Design automated security testing into CI/CD pipelines.
• Collaborate with engineering teams to remediate findings efficiently.
• Stay updated on threats and implement robust defense strategies.

Conocimientos

SAST/DAST tools

Secure code reviews

OWASP standards

Security coaching

SDLC security

English proficiency

Herramientas

SAST tools

DAST tools

CI/CD tooling

Descripción del empleo

BairesDev, a leader in technology solutions with 15+ years of experience, offers 100% remote roles and a global Top 1% talent network. We are seeking an Application Security Engineer to identify and mitigate vulnerabilities across our software applications and embed security across the SDLC.

You will review code, run SAST/DAST, mentor developers on OWASP standards, and integrate security testing into CI/CD pipelines while collaborating with engineering teams.