AppSec Engineer - Remote Work

About the role

As an Application Security Engineer at BairesDev, you will embed security into the software development lifecycle, partnering with engineering teams to protect web applications and APIs while maintaining development velocity.

Key responsibilities

• Perform secure code reviews and architectural assessments to identify threats in web applications and APIs.
• Execute and manage static and dynamic analysis (SAST/DAST) workflows using tools such as Semgrep, SonarQube, Snyk, or OWASP ZAP.
• Lead threat‑modeling sessions (e.g., STRIDE) to define trust boundaries and prioritize controls.
• Integrate automated security testing into CI/CD pipelines for continuous protection.
• Mentor developers on secure coding practices and the latest OWASP standards.
• Stay updated on emerging threats and recommend resilient defense strategies.

Required profile

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application‑layer security, threat modeling, and secure code review.
• Advanced proficiency in English.

Required skills

• SAST and DAST tools (Semgrep, SonarQube, Snyk, OWASP ZAP).
• Deep knowledge of OWASP Top 10 and secure SDLC practices.
• Threat modeling frameworks such as STRIDE.
• Secure code review and vulnerability remediation for web applications and APIs.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Multicultural environment with mentorship, promotion, and skill‑development opportunities.