Remote Product Security Engineer: SAST Triage Expert

INDI Staffing Services; Colombia; Híbrido; COP 90.000.000 - 140.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexibility in where/how you work

Personalized compensation

Tech-driven tools

Autonomous workflow

Generous leave policies

Diversity & Inclusion

Collaborative growth

Descripción de la vacante

INDI Staffing Services is seeking a Product Security Engineer who will perform hands-on SAST triage, conduct secure code reviews, and document findings in a regulated environment. You will tune static analysis tools and collaborate with engineering teams to remediate confirmed vulnerabilities.

The role requires 5+ years in product security or related fields and an advanced English proficiency. Flexible work approach promises autonomy, with opportunities for growth and collaboration with industry

Formación

• 5+ years hands-on experience in product security, application security, or software engineering with a security focus.
• Proven SAST triage beyond tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Advanced level of English communication in audit-driven environments.

Responsabilidades

• Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conducting source-to-sink analysis and secure code review across real codebases.
• Dispositioning findings with evidence-based documentation in a regulated environment.
• Tuning static analysis tools and managing false positive rates across the product portfolio.
• Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

Product Security

SAST Triage

Code Analysis

SAST Tools

Documentation

English Proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

INDI Staffing Services is seeking a Product Security Engineer who will perform hands-on SAST triage, conduct secure code reviews, and document findings in a regulated environment. You will tune static analysis tools and collaborate with engineering teams to remediate confirmed vulnerabilities.

The role requires 5+ years in product security or related fields and an advanced English proficiency. Flexible work approach promises autonomy, with opportunities for growth and collaboration with industry