Product Security Engineer (Remote)

About the role

BairesDev is seeking a Product Security Engineer to lead hands‑on static analysis triage for its global product portfolio. You will work remotely, applying deep expertise in SAST to evaluate findings, trace data flows, and influence risk remediation.

Key responsibilities

• Perform daily SAST triage, reviewing and validating findings across real codebases.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews.
• Document disposition decisions with audit‑traceable evidence in a regulated environment.
• Tune static analysis tools to reduce false‑positive rates.
• Collaborate with engineering teams to verify and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage, not just tool integration.
• Strong ability to analyze data flow from source to sink and conduct secure code reviews.
• Experience generating audit‑ready documentation for finding dispositions.
• Advanced proficiency in English.

Required skills

• Static Application Security Testing (SAST)
• Checkmarx, Fortify, Veracode, or Coverity
• Source‑to‑sink data‑flow analysis
• Secure code review
• Audit‑traceable documentation

What we offer

• 100% remote work from anywhere
• Competitive compensation in USD
• Provided hardware and software for home office
• Flexible schedule and paid parental leave, vacations, holidays
• Multicultural environment with mentorship, promotion pathways, and skill‑development opportunities