Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer who will focus on hands‑on static analysis triage. In this remote position you will directly influence how security risks are understood and remediated across our product portfolio.

Key responsibilities

• Perform daily SAST triage, reviewing findings and making evidence‑based disposition decisions.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews on real codebases.
• Document findings and dispositions in a traceable, compliance‑driven manner.
• Tune static analysis tools and manage false‑positive rates across the product portfolio.
• Collaborate with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Strong ability to perform source‑to‑sink data‑flow analysis and secure code review.
• Experience producing audit‑traceable documentation in regulated environments.
• Advanced proficiency in English.

Required skills

• Checkmarx
• Fortify
• Veracode
• Coverity
• Static Application Security Testing (SAST)
• Source‑to‑sink data‑flow analysis
• Secure code review

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours and self‑managed schedule.
• Paid parental leave, vacations, and holidays.
• Innovative, multicultural environment with mentorship and growth opportunities.