Remote Product Security Engineer - Hands-On SAST

BairesDev; Peru (IL); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

100% remote

USD or local currency payment

Home setup provided

Flexible hours

Parental leave

Mentorship & growth opportunities

Job summary

BairesDev is recruiting a Product Security Engineer to lead hands-on SAST triage and secure code review across live codebases, shaping risk insights in a regulated environment.

You will document findings with audit trails and collaborate with engineering to remediate vulnerabilities, leveraging Checkmarx, Fortify, Veracode, or Coverity. Strong English and 5+ years of security focus are required.

Qualifications

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of hands‑on SAST triage, not just tool integration or pipeline configuration.
• Strong source‑to‑sink data flow analysis and secure code review skills.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of finding dispositions in compliance‑driven environments.
• Advanced proficiency in English.

Responsibilities

• Perform hands‑on SAST triage as the primary daily activity, not a secondary responsibility.
• Conduct source‑to‑sink analysis and secure code review across real codebases.
• Disposition findings with evidence‑based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Skills

SAST triage

Secure code review

Source-to-sink analysis

Documentation

English proficiency

Tools

Checkmarx

Fortify

Veracode

Coverity

Job description

BairesDev is recruiting a Product Security Engineer to lead hands-on SAST triage and secure code review across live codebases, shaping risk insights in a regulated environment.

You will document findings with audit trails and collaborate with engineering to remediate vulnerabilities, leveraging Checkmarx, Fortify, Veracode, or Coverity. Strong English and 5+ years of security focus are required.