Application Security Engineer – Remote

About the role

BairesDev is seeking an Application Security Engineer to embed security throughout the software development lifecycle. You will partner with engineering teams to address vulnerabilities while keeping development velocity high.

Key responsibilities

• Perform secure code reviews and architectural assessments for web applications and APIs.
• Run and manage static and dynamic analysis (SAST/DAST) workflows.
• Lead threat‑modeling sessions using frameworks such as STRIDE.
• Integrate automated security testing into CI/CD pipelines.
• Mentor developers on secure coding practices and OWASP standards.
• Monitor the evolving threat landscape and recommend defensive strategies.

Required profile

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in threat modeling, secure code review, and vulnerability remediation for web apps and APIs.
• Advanced proficiency in English.

Required skills

• SAST and DAST tools (e.g., Semgrep, SonarQube, Snyk, OWASP ZAP).
• Deep knowledge of OWASP Top 10 and secure SDLC practices.
• Threat‑modeling frameworks such as STRIDE.
• CI/CD pipeline integration for security testing.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Mentorship, promotion pathways, and skill‑development opportunities within a multicultural, top‑talent environment.