AppSec Engineer - Remote Work

BairesDev; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

Competitive compensation

Home setup provided

Flexible hours

Paid parental leave

Descripción de la vacante

BairesDev in the United States is seeking an AppSec Engineer to perform comprehensive secure code reviews, architectural assessments, and threat modeling to identify threats in web apps and APIs.

You will integrate SAST/DAST into CI/CD, mentor developers on OWASP guidelines, stay ahead of evolving threats, and contribute to resilient security controls across the organization. This is a 100% remote role with flexible hours and USD compensation.

Formación

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code reviews.
• Proficiency with SAST/DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Strong background in identifying and remediating vulnerabilities in web apps and APIs.
• Advanced proficiency in English.

Responsabilidades

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage SAST and DAST workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using STRIDE to map trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection.
• Provide expert guidance and mentorship to developers on secure coding practices and OWASP standards.
• Stay current with the evolving threat landscape to recommend resilient defense strategies.

Conocimientos

Application security experience

Threat modeling

Secure code review

CI/CD security integration

OWASP Top 10 knowledge

Herramientas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descripción del empleo

AppSec Engineer at BairesDev

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

What You'll Do:

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using frameworks like STRIDE to map out trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection without creating bottlenecks.
• Provide expert guidance and mentorship to developers on secure coding practices and the latest OWASP standards.
• Stay current with the evolving threat landscape to recommend and implement resilient defense strategies across the organization.

What we are looking for:

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code review.
• Proficiency with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure software development lifecycle (SDLC) practices.
• Strong background in identifying and remediating vulnerabilities within web applications and APIs.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.