Product Security Engineer – Remote

About the role

We are looking for a Product Security Engineer who will focus on hands‑on static analysis triage. You will work remotely, applying deep SAST expertise to ensure the security of our customers' products.

Key responsibilities

• Perform daily hands‑on SAST triage as the primary activity.
• Conduct source‑to‑sink analysis and secure code reviews across real codebases.
• Document disposition of findings with evidence‑based reports in a regulated environment.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of hands‑on SAST triage, not just tool integration.
• Strong source‑to‑sink data‑flow analysis and secure code review capabilities.
• Experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit‑traceable documentation of finding dispositions in compliance‑driven environments.

Required skills

• SAST triage
• Source‑to‑sink data‑flow analysis
• Secure code review
• Checkmarx
• Fortify
• Veracode
• Coverity

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours – create your own schedule.
• Paid parental leave, vacations and holidays.
• Innovative multicultural environment with top‑tier talent.
• Mentorship, promotion pathways, and skill‑development opportunities.