Senior Product Security Engineer — Remote, SAST & Secure Code

BairesDev; Antioquia; Presencial; COP 281.171.000 - 468.618.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote

USD salary or local currency

Home office setup

Flexible hours

Parental leave

Generous vacation

Global mentorship

Descripción de la vacante

BairesDev, a global software company, is seeking a Product Security Engineer to join the remote team. You will perform hands-on SAST triage, conduct source-to-sink analysis, and review code across real codebases to strengthen our security posture.

You will partner with engineering to validate remediation, tune static analysis tools, and document findings with evidence in a regulated environment. Fluent English is required as the role collaborates with international teams.

Formación

• 5+ years of experience in product security, application security, or software engineering with hands-on security focus.
• Hands-on SAST triage experience, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced proficiency in English.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positives across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Secure code review

Audit documentation

English proficiency

Threat modeling

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev, a global software company, is seeking a Product Security Engineer to join the remote team. You will perform hands-on SAST triage, conduct source-to-sink analysis, and review code across real codebases to strengthen our security posture.

You will partner with engineering to validate remediation, tune static analysis tools, and document findings with evidence in a regulated environment. Fluent English is required as the role collaborates with international teams.