AppSec Engineer - Remote

About the role

BairesDev, a technology project company with more than 15 years of experience and a remote-first team of 4,000+ engineers, is hiring an AppSec Engineer. The role champions security across the application layer, acting as a security-focused partner for engineering teams so they can maintain development velocity while protecting their software.

Key responsibilities

• Perform secure code reviews and architectural assessments to find potential threats in web applications and APIs.
• Run and manage static and dynamic analysis (SAST/DAST) workflows to detect and fix vulnerabilities.
• Lead threat modeling sessions using frameworks such as STRIDE to map trust boundaries and prioritize security controls.
• Integrate automated security testing into CI/CD pipelines without creating bottlenecks.
• Mentor developers on secure coding practices and the latest OWASP standards.
• Stay up to date with the threat landscape and recommend resilient defense strategies.

Required profile

• 4+ years of experience in application security, software engineering or cybersecurity.
• Proven expertise in application-layer security, including threat modeling and secure code review.
• Strong background in finding and fixing vulnerabilities in web applications and APIs.
• Advanced English proficiency.

Required skills

• SAST and DAST tools such as Semgrep, SonarQube, Snyk or OWASP ZAP.
• Deep knowledge of the OWASP Top 10 and secure SDLC practices.

What we offer

• 100% remote work from anywhere.
• Compensation in USD or your local currency.
• Hardware and software setup provided for working from home.
• Flexible hours and paid parental leave, vacations and holidays.
• A multicultural environment with mentorship, promotions and growth opportunities.