Product Security Engineer - Remote Work

INDI Staffing Services is focused on empowering individuals and businesses worldwide and connecting leading companies with top talent.

About the role

This role centers on hands-on static analysis triage. The quality of triage directly shapes how product risk is understood and remediated. It is not focused on security architecture, DevSecOps pipeline ownership, or vulnerability program management.

Responsibilities

• Perform hands-on SAST triage as the primary daily activity.
• Conduct source-to-sink analysis and secure code review across real codebases.
• Disposition findings with evidence-based documentation in a regulated environment.
• Tune static analysis tools and manage false positive rates across the product portfolio.
• Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.

Requirements

• 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
• Proven SAST triage experience beyond tool integration or pipeline configuration.
• Strong source-to-sink data flow analysis and secure code review skills.
• Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
• Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
• Advanced level of English.

Benefits

• Flexibility to choose where and how you work.
• Tailored compensation to suit your financial goals.
• Access to tech-driven tools and resources for collaboration.

How to apply

Apply directly on CazVid.

Datos clave

• The role centers on hands-on static analysis triage.
• Requires 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
• Advanced level of English is required.
• Benefits include tailored compensation and access to tech-driven tools.