Product Security Engineer

About the role

BairesDev is seeking a Product Security Engineer to strengthen the security posture of its application-layer infrastructure. You will act as a bridge between security standards and software development, ensuring robust defenses are built from the earliest stages of the product lifecycle.

Key responsibilities

• Perform comprehensive threat modeling to identify potential attack vectors in application architectures.
• Execute manual and automated secure code reviews to detect and remediate vulnerabilities early.
• Deploy and manage SAST and DAST tooling to maintain continuous security visibility across the SDLC.
• Collaborate with engineering squads to integrate security guardrails into development workflows.
• Define and advocate for secure coding standards based on industry benchmarks like the OWASP Top 10.

Required profile

• 4+ years of experience in Application Security, Product Security, or Software Engineering.
• Proven expertise in threat modeling and conducting secure code reviews.
• Advanced proficiency in English.

Required skills

• Hands‑on experience with SAST and DAST tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Deep understanding of the OWASP Top 10 and secure SDLC practices.
• Ability to identify and mitigate application‑layer security vulnerabilities.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and paid parental leaves, vacations, and holidays.
• Mentorship, promotions, skill development, and multicultural environment.