AppSec Engineer – Remote

About the role

BairesDev is seeking an experienced Application Security Engineer to embed security throughout the software development lifecycle. Working remotely, you will partner with engineering teams to protect web applications and APIs while maintaining development velocity.

Key responsibilities

• Perform secure code reviews and architectural assessments to uncover threats.
• Execute and manage SAST/DAST workflows using tools such as Semgrep, SonarQube, Snyk, and OWASP ZAP.
• Lead threat‑modeling sessions (e.g., STRIDE) to define trust boundaries and prioritize controls.
• Integrate automated security testing into CI/CD pipelines for continuous protection.
• Mentor developers on secure coding practices and OWASP Top 10 standards.
• Stay updated on emerging threats and recommend resilient defense strategies.

Required profile

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application‑layer security, threat modeling, and secure code review.
• Deep knowledge of OWASP Top 10 and secure SDLC practices.
• Strong background in identifying and remediating vulnerabilities in web applications and APIs.
• Advanced proficiency in English.

Required skills

• Semgrep
• SonarQube
• Snyk
• OWASP ZAP
• STRIDE threat‑modeling framework

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Mentorship, skill development, and growth opportunities within a multicultural global team.