Remote Product Security Engineer — Secure SDLC Innovator

BairesDev; Colombia; Presencial; COP 318.056.000 - 445.278.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD or local currency pay

Home office hardware & software setup

Flexible hours

Paid parental leave and holidays

Global, multicultural team environment

Mentorship and career development

Descripción de la vacante

BairesDev is a fully remote technology company with a vast, global engineering team. We are seeking a Product Security Engineer to strengthen the security posture of our application-layer infrastructure and ensure secure development from the earliest lifecycle stages.

You will work with top-tier clients and internal squads to implement security guardrails, tooling, and best practices. Excellent English and SDLC security expertise are required.

Formación

• 4+ years in Application Security or Software Engineering.
• Experience with threat modeling and secure code reviews.
• Proficient with SAST/DAST tools and secure SDLC practices.

Responsabilidades

• Perform threat modeling to identify attack vectors.
• Conduct manual and automated secure code reviews.
• Deploy and manage SAST/DAST tooling for SDLC visibility.
• Collaborate with engineering to embed security guardrails in workflows.
• Define secure coding standards per OWASP Top 10.
• Guide security controls for product resilience and data protection.

Conocimientos

Threat modeling

Secure code reviews

SAST/DAST tooling

OWASP Top 10

SDLC security

English proficiency

Herramientas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descripción del empleo

BairesDev is a fully remote technology company with a vast, global engineering team. We are seeking a Product Security Engineer to strengthen the security posture of our application-layer infrastructure and ensure secure development from the earliest lifecycle stages.

You will work with top-tier clients and internal squads to implement security guardrails, tooling, and best practices. Excellent English and SDLC security expertise are required.