Remote Product Security Engineer - Flexible Hours & Impact

BairesDev; Veracruz; Presencial; MXN 1.531.000 - 2.042.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Excellent compensation in USD or local

Hardware and software setup for home

Flexible hours

Paid parental leaves, vacations, and n

Diverse growth opportunities

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to join our 100% remote team. You will perform hands-on SAST triage and secure code reviews across real codebases, partnering with engineering to validate and drive remediation of vulnerabilities.

You will document findings with audit-traceable evidence in a regulated environment, tune static analysis tools, and manage false positives across the product portfolio. Advanced English is required to collaborate with global teams.

Formación

• 5+ years in product security, application security, or software engineering with hands-on security focus.
• Hands-on SAST triage experience, not only tool integration or pipeline config.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating SAST tools at finding level (Checkmarx, Fortify, Veracode, Coverity).
• Audit-traceable documentation of findings in compliance-driven environments.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Secure code review

Audit-traceable docs

Tooling tuning

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking a Product Security Engineer to join our 100% remote team. You will perform hands-on SAST triage and secure code reviews across real codebases, partnering with engineering to validate and drive remediation of vulnerabilities.

You will document findings with audit-traceable evidence in a regulated environment, tune static analysis tools, and manage false positives across the product portfolio. Advanced English is required to collaborate with global teams.