Product Security Engineer — Remote, Hands-On SAST

BairesDev; Peru (IL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work from anywhere

Competitive USD or local currency

Hardware and software setup for remote

Flexible hours

Paid parental leaves and holidays

Global team and growth opportunities

Job summary

BairesDev is hiring a Product Security Engineer for a 100% remote role. You will perform hands-on SAST triage, conduct source-to-sink analysis, and drive secure code reviews across real codebases.

You will produce audit-traceable documentation of findings and work with engineering teams to ensure timely remediation of vulnerabilities in a regulated environment. Strong English is required, and the role offers excellent USD or local currency compensation.

Qualifications

• 5+ years of experience in product security, application security, or software engineering with a hands-on security focus.
• Proven track record of hands-on SAST triage, not just tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.

Responsibilities

• Perform hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Skills

SAST triage

Source-to-sink analysis

Secure code review

Audit-traceable documentation

English proficiency

Tools

Checkmarx

Fortify

Veracode

Coverity

Job description

BairesDev is hiring a Product Security Engineer for a 100% remote role. You will perform hands-on SAST triage, conduct source-to-sink analysis, and drive secure code reviews across real codebases.

You will produce audit-traceable documentation of findings and work with engineering teams to ensure timely remediation of vulnerabilities in a regulated environment. Strong English is required, and the role offers excellent USD or local currency compensation.