Remote App Security Engineer - Threat Modeling & SDLC

BairesDev; Venezuela; Teletrabalho; VES 78 878 000 - 122 699 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work

Flexible hours

Global team and mentorship

Resumo da oferta

BairesDev is seeking a Security Engineer (Application) to safeguard our software at the application layer and integrate security deeply into the development lifecycle from design to deployment.

You will conduct threat modeling, perform secure code reviews, and manage automated SAST/DAST workflows, collaborating with teams to remediate OWASP Top 10 risks and strengthen the secure SDLC.

Qualificações

• 4+ years in Application Security, cybersecurity, or software engineering.
• Experience performing threat modeling and secure code reviews based on OWASP Top 10.
• Hands-on with SAST/DAST tools such as Semgrep, SonarQube, Snyk, and OWASP ZAP.
• Strong English communication skills.

Responsabilidades

• Conduct comprehensive threat modeling sessions to identify architectural risks early in design.
• Perform secure code reviews to detect logic flaws and ensure security best practices.
• Execute and manage automated security testing workflows using SAST and DAST tools to maintain a secure SDLC.
• Partner with development teams to prioritize and remediate vulnerabilities based on OWASP Top 10 and other standards.
• Develop and implement automated security validation tests to streamline identification of weaknesses.
• Promote security-first coding patterns and provide guidance to improve overall security posture.

Conhecimentos

Threat modeling

Secure code reviews

SAST/DAST tools

Secure SDLC

English proficiency

Ferramentas

Semgrep

SonarQube

Snyk

OWASP ZAP

Descrição da oferta de emprego

BairesDev is seeking a Security Engineer (Application) to safeguard our software at the application layer and integrate security deeply into the development lifecycle from design to deployment.

You will conduct threat modeling, perform secure code reviews, and manage automated SAST/DAST workflows, collaborating with teams to remediate OWASP Top 10 risks and strengthen the secure SDLC.