Product Security Engineer (Remote)

About the role

As a Product Security Engineer at BairesDev, you will strengthen the security posture of application‑layer infrastructure, bridging security standards and software development to embed robust defenses from the earliest stages of the product lifecycle.

Key responsibilities

• Perform comprehensive threat modeling to identify potential attack vectors in application architectures.
• Execute manual and automated secure code reviews, detecting and remediating vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain continuous security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on industry benchmarks such as the OWASP Top 10.
• Guide the implementation of security controls to ensure product resilience and data protection.

Required profile

• 4+ years of experience in Application Security, Product Security, or Software Engineering.
• Proven expertise in threat modeling and secure code review processes.
• Advanced proficiency in English.

Required skills

• Hands‑on experience with SAST/DAST tools (e.g., Semgrep, SonarQube, Snyk, OWASP ZAP).
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Ability to identify and mitigate application‑layer security vulnerabilities.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and paid parental leave, vacations, holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.