Security Engineer (Application) - Remote

About the role

BairesDev, a technology project company with more than 15 years of experience and a remote team of 4,000+ engineers, is hiring an Application Security Engineer. You will safeguard software at the application layer by integrating security deeply into the development lifecycle, from initial design to final deployment.

Key responsibilities

• Conduct threat modeling sessions to identify and mitigate architectural risks early in the design phase.
• Perform secure code reviews to detect logic flaws and ensure adherence to security best practices.
• Run and manage automated security testing workflows using SAST and DAST tools to keep the SDLC secure.
• Work with development teams to prioritize and remediate vulnerabilities according to the OWASP Top 10 and other standards.
• Develop automated security validation tests and promote security-first coding patterns, giving technical guidance to improve the security posture of applications.

Required profile

• 4+ years of experience in Application Security, Cybersecurity or Software Engineering.
• Proven expertise in threat modeling and secure code reviews based on the OWASP Top 10.
• Deep understanding of integrating security controls and best practices throughout the secure SDLC.
• Advanced proficiency in English.

Required skills

• SAST and DAST tools such as Semgrep, SonarQube, Snyk and OWASP ZAP.
• Threat modeling and secure code review.

What we offer

• 100% remote work from anywhere.
• Excellent compensation in USD or your local currency if preferred.
• Hardware and software setup provided for working from home.
• Flexible hours: set your own schedule.
• Paid parental leave, vacations and holidays.
• Mentorship, promotions, skill development and a multicultural environment.