Security Engineer (Application) – Remote

About the role

BairesDev is seeking an Application Security Engineer to embed security throughout the software development lifecycle. You will work remotely, collaborating with global development teams to protect applications from design to deployment.

Key responsibilities

• Conduct threat modeling sessions to identify architectural risks early in design.
• Perform secure code reviews to detect logic flaws and enforce security best practices.
• Run and manage automated SAST and DAST testing pipelines using tools such as Semgrep, SonarQube, Snyk, and OWASP ZAP.
• Partner with developers to prioritize and remediate vulnerabilities based on OWASP Top 10 and other standards.
• Develop automated security validation tests and promote security‑first coding patterns.

Required profile

• 4+ years of experience in Application Security, Cybersecurity, or Software Engineering.
• Proven ability to conduct threat modeling and secure code reviews.
• Advanced proficiency in English.

Required skills

• Semgrep
• SonarQube
• Snyk
• OWASP ZAP
• Experience with SAST and DAST tools

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.