Remote Product Security Engineer — Lead Secure Code Review

BairesDev; Nuevo León; Presencial; MXN 1.531.000 - 2.382.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive USD compensation

Home office setup provided

Flexible hours

Mentorship and career growth

Descripción de la vacante

BairesDev is seeking a Product Security Engineer to join our fully remote team. You will perform hands-on SAST triage, conduct source-to-sink analysis, and drive secure code reviews across real codebases.

You will collaborate with engineering teams to validate remediations, tune analysis tools, and produce audit-traceable documentation in a regulated environment. Excellent English is required.

Formación

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Hands-on SAST triage experience beyond tool configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Ability to produce audit-traceable documentation of findings in compliance-driven environments.
• Advanced proficiency in English.

Responsabilidades

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code reviews across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Conocimientos

SAST triage

Secure code review

Source-to-sink analysis

Documentation

English proficiency

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking a Product Security Engineer to join our fully remote team. You will perform hands-on SAST triage, conduct source-to-sink analysis, and drive secure code reviews across real codebases.

You will collaborate with engineering teams to validate remediations, tune analysis tools, and produce audit-traceable documentation in a regulated environment. Excellent English is required.