Product Security Engineer – Remote

About the role

As a Product Security Engineer at BairesDev, you will strengthen the security posture of application‑layer infrastructure, bridging security standards and software development to ensure robust defenses from the earliest stages of the product lifecycle.

Key responsibilities

• Perform comprehensive threat modeling to identify potential attack vectors in application architectures.
• Execute manual and automated secure code reviews to detect and remediate vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain continuous security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on industry benchmarks like the OWASP Top 10.
• Guide the implementation of security controls to ensure product resilience and data protection.

Required profile

• 4+ years of experience in Application Security, Product Security, or Software Engineering.
• Proven expertise in threat modeling and conducting secure code reviews.
• Advanced proficiency in English.

Required skills

• Hands‑on experience with SAST/DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Ability to identify and mitigate application‑layer security vulnerabilities.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and the ability to create your own schedule.
• Paid parental leave, vacations, and holidays.
• Innovative, multicultural environment with mentorship, promotions, and skill‑development opportunities.