Remote AppSec Engineer: Secure SDLC & Global Impact

BairesDev; Colombia; Remote; COP 222,795,000 - 477,418,000; Full time

Benefits offered by this job

Remote work from anywhere

Home office setup

Flexible hours

Parental leave and holidays

Competitive USD or local currency

Job summary

BairesDev is seeking an AppSec Engineer to champion security across the application lifecycle. You will partner with engineering teams to embed strong protections while maintaining development velocity.

The role requires deep knowledge of application security, threat modeling, and secure SDLC practices, with English fluency and the ability to work in a fully remote, international environment.

Qualifications

• 4+ years in AppSec, software engineering, or cybersecurity.
• Expertise in application-layer security and threat modeling.
• Experience with SAST/DAST tools and secure SDLC.

Responsibilities

• Perform secure code reviews and architectural assessments to identify threats in web apps and APIs.
• Execute and manage SAST/DAST workflows to detect and remediate vulnerabilities.
• Lead threat modeling sessions using STRIDE to map trust boundaries and prioritize controls.
• Integrate automated security testing into CI/CD pipelines to maintain security without slowing development.
• Provide mentorship on secure coding practices and OWASP standards.
• Stay current with evolving threat landscape and implement resilient defenses across the org.

Skills

Application security

Threat modeling

Secure coding practices

OWASP Top 10

English proficiency

Tools

SAST tools

DAST tools

Semgrep

SonarQube

Snyk

OWASP ZAP

Job description

BairesDev is seeking an AppSec Engineer to champion security across the application lifecycle. You will partner with engineering teams to embed strong protections while maintaining development velocity.

The role requires deep knowledge of application security, threat modeling, and secure SDLC practices, with English fluency and the ability to work in a fully remote, international environment.