Senior Application Security Engineer (Remote)

About the role

BairesDev is seeking a Senior Application Security Engineer to lead the protection of application layers across its global client portfolio. The role focuses on identifying and mitigating risks throughout the software development lifecycle while championing security best practices.

Key responsibilities

• Conduct in-depth security assessments of application code and architecture to identify logical flaws and vulnerabilities.
• Orchestrate integration of automated security testing tools, including SAST and DAST, into CI pipelines.
• Facilitate threat modeling sessions with development teams to proactively design out security risks in new features.
• Lead manual secure code reviews and provide actionable remediation guidance to engineering partners.
• Define and refine secure coding standards based on OWASP Top 10 and other industry benchmarks.
• Mentor developers on emerging application security trends and techniques to foster a security‑first culture.

Required profile

• 4+ years of experience in Application Security, Cybersecurity, or Software Engineering.
• Proven expertise in identifying and mitigating vulnerabilities using the OWASP Top 10 framework.
• Hands‑on experience performing threat modeling and manual secure code reviews.
• Proficiency in implementing and managing SAST and DAST tools such as Semgrep, Snyk, or OWASP ZAP.
• Strong understanding of integrating security controls within CI/CD pipelines and the secure SDLC.
• Advanced proficiency in English.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible hours to create your own schedule.
• Paid parental leave, vacations, and holidays.
• Innovative multicultural environment collaborating with global top talent.
• Mentorship, promotion pathways, skill development and diverse growth opportunities.