Product Security Engineer - Remote Work

INDI Staffing Services; Caracas; Remote; VES 80,000,000 - 124,444,000; Full time

Benefits offered by this job

Flexible work locations

Tailored compensation

Generous leave policies

Job summary

INDI Staffing Services is seeking a Product Security Engineer to perform hands-on SAST triage and secure code reviews across real codebases. You will document findings with evidence and work to reduce false positives in a regulated environment.

Ideal candidates have 5+ years in product security, strong data-flow analysis skills, and experience with major SAST tools. This role offers flexible work arrangements and opportunities for growth in a technology-driven team.

Qualifications

• 5+ years in product security or related field.
• Hands-on SAST triage beyond basic tool use.
• Strong source-to-sink data flow and secure code review.
• Experience operating major SAST tools at findings level.
• Audit-traceable documentation of findings in regulated environments.
• Advanced English communication.

Responsibilities

• Perform hands-on SAST triage as primary activity.
• Conduct source-to-sink analysis and secure code reviews.
• Document findings with evidence-based dispositions.
• Tune tools and manage false positives across products.
• Collaborate with engineering to remediate confirmed vulnerabilities.

Skills

Product Security

SAST Triage

Code Analysis

Documentation

English Proficiency

Flexibility

Autonomous Workflow

Collaboration

Tools

Checkmarx

Fortify

Veracode

Coverity

Job description

At INDI, we're passionate about empowering individuals and businesses worldwide. Our cutting-edge recruiters connect leading companies with top talent, fostering a dynamic environment where innovation thrives. Join us in shaping the future of work.

Overview of the role

The Product Security Engineer role centers on hands-on static analysis triage rather than security architecture, DevSecOps pipeline ownership, or vulnerability program management. This is an opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of triage directly shapes how risk is understood and remediated across the product.

Key responsibilities

• - Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
• - Conducting source-to-sink analysis and secure code review across real codebases.
• - Dispositioning findings with evidence-based documentation in a regulated environment.
• - Tuning static analysis tools and managing false positive rates across the product portfolio.
• - Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Requirements

• - Product Security: 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
• - SAST Triage: Proven track record beyond tool integration or pipeline configuration.
• - Code Analysis: Strong source-to-sink data flow analysis and secure code review skills.
• - SAST Tools: Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• - Documentation: Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• - Language Proficiency: Advanced level of English.
• - Flexibility: Choose where and how you work for enhanced creativity and innovation.
• - Tailored Compensation: Personalize your earnings to suit your financial goals.
• - Tech-Driven Tools: Access cutting-edge resources for seamless collaboration and productivity.
• - Autonomous Workflow: Take control of your schedule to achieve work-life balance.
• - Well-being: Enjoy generous leave policies for rest and rejuvenation.
• - Diversity & Inclusion: Thrive in a diverse and inclusive environment.
• - Collaboration: Engage with industry leaders for collective growth.
• - Development: Access mentorship and growth opportunities for continuous advancement.