Product Security Engineer - Remote Work
Aviso de fuente externaen INDI Staffing Services
Product Security Engineer role focused on hands-on SAST triage, secure code review, evidence-based findings, and vulnerability remediation.
Salario
No especificado
Ubicación
Bogotá, Colombia
Tipo de empleo
Tiempo completo
Modalidad
No especificado
Product Security Engineer - Remote Work
Bogotá, Colombia
Descripción del empleo
About the role
INDI Staffing Services is seeking a Product Security Engineer focused on hands-on static analysis triage. The role centers on source-to-sink analysis, secure code review, and evidence-based finding dispositions in a regulated environment.
Responsibilities
- Perform hands-on SAST triage as the primary daily activity.
- Conduct source-to-sink analysis and secure code review across real codebases.
- Document finding dispositions with evidence in a regulated environment.
- Tune static analysis tools and manage false positive rates across the product portfolio.
- Partner with engineering teams to validate and drive remediation of confirmed vulnerabilities.
Requirements
- 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
- Proven SAST triage experience beyond tool integration or pipeline configuration.
- Strong source-to-sink data flow analysis and secure code review skills.
- Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
- Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
- Advanced level of English.
Benefits
- Flexibility to choose where and how you work.
- Tailored compensation to suit your financial goals.
- Access to tech-driven tools for collaboration.
How to apply
Apply directly on CazVid.
Datos clave
- The primary daily activity is hands-on SAST triage.
- Requires 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
- Advanced level of English is required.
- Apply directly on CazVid.
Preguntas frecuentes
What does the Product Security Engineer role involve?
The role focuses on hands-on SAST triage, source-to-sink analysis, and secure code review. It also includes documenting findings and partnering with engineering teams on remediation.
What experience and skills are required?
The listing requires 5+ years of hands-on experience in product security, application security, or software engineering with a security focus. It also calls for SAST triage experience, code analysis skills, and advanced English.
How can I apply?
Apply directly on CazVid.