Product Security Engineer - Remote Work

INDI Staffing Services; Caracas; Sur place; VES 1 200 000 - 2 400 000; Plein temps

Avantages offerts par ce poste

Flexible work location

Generous leave policies

Diversity & inclusion

Mentorship opportunities

Access to cutting-edge tools

Résumé du poste

INDI Staffing Services seeks a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases in a high-accountability environment.

The role emphasizes evidence-based findings, collaboration with engineering teams, and flexible work options, with advanced English required for effective communication.

Qualifications

• 5+ years hands-on experience in product security or software security.
• Proven SAST triage experience beyond basic tooling.
• Strong source-to-sink data flow analysis and secure code review.
• Experience operating Checkmarx, Fortify, Veracode, or Coverity at findings level.
• Audit-traceable documentation in compliance-driven environments.
• Advanced level of English communication.

Responsabilités

• Performing hands-on SAST triage as the primary daily activity.
• Conducting source-to-sink analysis and secure code review across real codebases.
• Dispositioning findings with evidence-based documentation in a regulated environment.
• Tuning static analysis tools and managing false positive rates across the product portfolio.
• Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Connaissances

Product security

SAST triage

Secure code analysis

SAST tools

Documentation

English proficiency

Outils

Checkmarx

Fortify

Veracode

Coverity

Description du poste

At INDI, we're passionate about empowering individuals and businesses worldwide. Our cutting-edge recruiters connect leading companies with top talent, fostering a dynamic environment where innovation thrives. Join us in shaping the future of work.

Overview of the role

The Product Security Engineer role centers on hands-on static analysis triage rather than security architecture, DevSecOps pipeline ownership, or vulnerability program management. This is an opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of triage directly shapes how risk is understood and remediated across the product.

Key responsibilities

• - Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• - Conducting source-to-sink analysis and secure code review across real codebases.
• - Dispositioning findings with evidence-based documentation in a regulated environment.
• - Tuning static analysis tools and managing false positive rates across the product portfolio.
• - Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Requirements

• - Product Security: 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
• - SAST Triage: Proven track record beyond tool integration or pipeline configuration.
• - Code Analysis: Strong source-to-sink data flow analysis and secure code review skills.
• - SAST Tools: Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• - Documentation: Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• - Language Proficiency: Advanced level of English.
• - Flexibility: Choose where and how you work for enhanced creativity and innovation.
• - Tailored Compensation: Personalize your earnings to suit your financial goals.
• - Tech-Driven Tools: Access cutting-edge resources for seamless collaboration and productivity.
• - Autonomous Workflow: Take control of your schedule to achieve work-life balance.
• - Well-being: Enjoy generous leave policies for rest and rejuvenation.
• - Diversity & Inclusion: Thrive in a diverse and inclusive environment.
• - Collaboration: Engage with industry leaders for collective growth.
• - Development: Access mentorship and growth opportunities for continuous advancement.