Security Engineer – Application (Remote)

About the role

BairesDev is seeking an Application Security Engineer to embed security throughout the software development lifecycle. You will work remotely with global development teams, ensuring that applications are designed, built, and deployed with robust security controls.

Key responsibilities

• Conduct comprehensive threat‑modeling sessions to identify architectural risks early.
• Perform secure code reviews to detect logic flaws and enforce OWASP Top 10 best practices.
• Execute and manage automated security testing workflows using SAST and DAST tools.
• Partner with development teams to prioritize and remediate vulnerabilities.
• Develop automated security validation tests to streamline weakness detection.
• Drive adoption of security‑first coding patterns and provide technical guidance.

Required profile

• 4+ years of experience in Application Security, Cybersecurity, or Software Engineering.
• Proven expertise in threat modeling and secure code reviews based on OWASP Top 10.
• Hands‑on experience with SAST and DAST tools.
• Advanced proficiency in English.

Required skills

• Threat modeling
• Secure code review
• SAST tools (e.g., Semgrep, SonarQube)
• DAST tools (e.g., Snyk, OWASP ZAP)
• OWASP Top 10 knowledge

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and holidays.
• Mentorship, promotions, skill development, and diverse growth opportunities.