Senior AppSec Engineer (Remote)

About the role

BairesDev, a technology project company with more than 15 years of experience and a remote team of 4,000+ engineers, is hiring a Senior AppSec Engineer. The role focuses on securing the application layer by identifying and mitigating risks across the software development lifecycle, acting as a primary advocate for security best practices so that product teams build resilient applications.

Key responsibilities

• Conduct in-depth security assessments of application code and architecture to identify logical flaws and vulnerabilities.
• Integrate automated security testing tools, including SAST and DAST, into continuous integration pipelines.
• Facilitate threat modeling sessions with development teams to design out security risks in new features.
• Lead manual secure code reviews and give actionable remediation guidance to engineering partners.
• Define and refine secure coding standards based on the OWASP Top 10 and other industry benchmarks.
• Mentor developers on emerging application security trends and techniques.

Required profile

• 4+ years of experience in Application Security, Cybersecurity or Software Engineering.
• Proven expertise in identifying and mitigating vulnerabilities using the OWASP Top 10 framework.
• Hands-on experience performing threat modeling and manual secure code reviews.
• Advanced proficiency in English.

Required skills

• SAST and DAST tools such as Semgrep, Snyk or OWASP ZAP.
• Integration of security controls within CI/CD pipelines and the secure SDLC.

What we offer

• 100% remote work from anywhere.
• Excellent compensation in USD or your local currency if preferred.
• Hardware and software setup provided for working from home.
• Flexible hours and the ability to set your own schedule.
• Paid parental leave, vacations and holidays.
• A multicultural environment with mentorship, promotions and growth opportunities.