Remote AppSec Engineer — Secure Code & CI/CD Guardian

BairesDev; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

100% remote work

Competitive compensation

Home setup provided

Flexible hours

Paid parental leave

Job summary

BairesDev in the United States is seeking an AppSec Engineer to perform comprehensive secure code reviews, architectural assessments, and threat modeling to identify threats in web apps and APIs.

You will integrate SAST/DAST into CI/CD, mentor developers on OWASP guidelines, stay ahead of evolving threats, and contribute to resilient security controls across the organization. This is a 100% remote role with flexible hours and USD compensation.

Qualifications

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application-layer security including threat modeling and secure code reviews.
• Proficiency with SAST/DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Strong background in identifying and remediating vulnerabilities in web apps and APIs.
• Advanced proficiency in English.

Responsibilities

• Perform comprehensive secure code reviews and architectural assessments to identify potential threats in web applications and APIs.
• Execute and manage SAST and DAST workflows to proactively detect and remediate vulnerabilities.
• Lead threat modeling sessions using STRIDE to map trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines to ensure continuous protection.
• Provide expert guidance and mentorship to developers on secure coding practices and OWASP standards.
• Stay current with the evolving threat landscape to recommend resilient defense strategies.

Skills

Application security experience

Threat modeling

Secure code review

CI/CD security integration

OWASP Top 10 knowledge

Tools

Semgrep

SonarQube

Snyk

OWASP ZAP

Job description

BairesDev in the United States is seeking an AppSec Engineer to perform comprehensive secure code reviews, architectural assessments, and threat modeling to identify threats in web apps and APIs.

You will integrate SAST/DAST into CI/CD, mentor developers on OWASP guidelines, stay ahead of evolving threats, and contribute to resilient security controls across the organization. This is a 100% remote role with flexible hours and USD compensation.