Remote Product Security Engineer — Elevate Secure Coding

BairesDev; Colombia; Presencial; COP 374.895.000 - 499.859.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive salary in USD or local

Home office hardware provided

Flexible hours

Parental leave and vacation allowances

Global, multicultural team

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document dispositions with evidence in a regulated setting and tune analysis tools to manage false positives across the product portfolio.

The role requires strong data-flow analysis, experience with major SAST tools, and the ability to collaborate with engineering teams to drive remediation. 100% remote, with USD or local currency options.

Formación

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Proven track record of hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Source-to-sink analysis

Secure code review

Audit documentation

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document dispositions with evidence in a regulated setting and tune analysis tools to manage false positives across the product portfolio.

The role requires strong data-flow analysis, experience with major SAST tools, and the ability to collaborate with engineering teams to drive remediation. 100% remote, with USD or local currency options.