Remote Application Security Engineer — Secure SDLC Expert

BairesDev; United States; Teletrabalho; CLP 118 577 000 - 177 866 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

100% remote work

USD or local currency compensation

Home office setup

Flexible hours

Resumo da oferta

BairesDev is hiring a Security Engineer (Application) to protect software at the application layer and embed security across the SDLC. This fully remote role offers flexible hours and top-tier compensation in USD or your local currency, with opportunities to impact global products for a diverse client base.

You will lead threat modeling, conduct secure code reviews, and drive automated security testing using SAST/DAST tools, collaborating with global development teams.

Qualificações

• 4+ years in Application Security or related fields.
• Experience with threat modeling and OWASP Top 10.
• Hands-on with SAST and DAST tools (Semgrep, SonarQube, Snyk, OWASP ZAP).
• Knowledge of integrating security into SDLC.
• Proficient in English.

Responsabilidades

• Conduct threat modeling sessions to identify architectural risks early in design.
• Perform secure code reviews to detect logic flaws and ensure secure coding.
• Execute and manage automated security testing using SAST and DAST tools.
• Collaborate with development teams to remediate vulnerabilities per OWASP Top 10 and standards.
• Develop automated security validation tests to streamline detection of weaknesses.
• Promote security-first coding patterns and guide overall security posture.

Conhecimentos

Threat modeling

Secure code reviews

OWASP Top 10

SDLC security

English proficiency

Ferramentas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descrição da oferta de emprego

BairesDev is hiring a Security Engineer (Application) to protect software at the application layer and embed security across the SDLC. This fully remote role offers flexible hours and top-tier compensation in USD or your local currency, with opportunities to impact global products for a diverse client base.

You will lead threat modeling, conduct secure code reviews, and drive automated security testing using SAST/DAST tools, collaborating with global development teams.