Senior Security Engineer - Remote Work | REF#304205

BairesDev; United States; Remote; MXN 2,037,000 - 3,056,000; Full time

Benefits offered by this job

100% remote work

USD or local currency compensation

Home office setup provided

Flexible hours

Parental leave & holidays

Job summary

BairesDev, a global software powerhouse, seeks a Senior Security Engineer to drive security across cloud-native services. You will design hardened container images, secure Kubernetes workloads, and build Go-based security automation, collaborating with engineering teams through Git PR workflows.

The role emphasizes hands-on coding, vulnerability triage (SCA, SAST, DAST), CI/CD hardening, and Terraform-based controls in AWS and Azure.

Qualifications

• 5+ years of software engineering with a security focus.
• Strong proficiency in Go for security tooling.
• Experience with container security including hardened base images and Kubernetes runtime security.
• Experience with SCA, SAST, DAST and triage to patch.
• Background in supply chain security, CI/CD hardening, and IaC templates.

Responsibilities

• Design hardened container base images and secure Kubernetes workloads.
• Build Go-based security automation tooling.
• Drive vulnerability remediation with engineering teams via Git PR workflows.
• Perform SCA, SAST, and DAST triage from discovery to patch.
• Harden CI/CD pipelines, IaC templates, and Helm charts against supply chain risks.

Skills

Go

Kubernetes

Security automation

CI/CD

Terraform

AWS

Azure

SCA

SAST

DAST

Supply chain security

AI in security

English

Tools

Artifactory

JFrog

Chainguard

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior Security Engineer at BairesDev

In this role, you'll drive supply chain and cloud-native security across hundreds of services, designing hardened container images and securing Kubernetes workloads at scale. Building Go-based security automation, you'll work directly with engineering teams through Git PR workflows, committing patches yourself rather than just flagging issues. This is your opportunity to be a strong coder first and a security expert second, applying sharp engineering judgment to distinguish good code from bad, AI-generated or otherwise.

What You’ll Do

• Design hardened container base images and secure Kubernetes workloads.
• Build Go-based security automation tooling.
• Drive vulnerability remediation with engineering teams via Git PR workflows, including committing patches directly.
• Perform SCA, SAST, and DAST triage, taking vulnerabilities from discovery to patch.
• Harden CI/CD pipelines, IaC templates, and Helm charts against supply chain risks.

What We Are Looking For

• 5+ years of experience in software engineering with a security focus.
• Strong proficiency in Go for security automation tooling.
• Experience with container security, including hardened base images, Kubernetes runtime security, network policies, and admission controllers.
• Experience with SCA and large-scale dependency vulnerability remediation, including SAST, DAST, and triage to patch.
• Background in supply chain security, including CI/CD hardening, IaC templates, Helm charts, and third-party dependencies.
• Experience with Terraform for provisioning security controls.
• Experience with AWS cloud security, with Azure as a secondary platform, focused on container orchestration.
• Experience applying AI to security, such as LLMs or MCP for automated vulnerability fixing or alert grouping, or a strong conceptual understanding of these approaches.
• Advanced proficiency in English.

Nice To Have

• Experience with Node.js development.
• Familiarity with Artifactory or JFrog.
• Experience with zero-CVE container vendors such as Chainguard or similar.
• Knowledge of the OWASP Top 10.
• Familiarity with supply chain frameworks such as SLSA.
• Experience with FIPS compliance and cipher migration.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!