09 sep
|
BairesDev
|
Colombia
09 sep
BairesDev
Colombia
At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.
Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
Senior Security Engineer at BairesDev In this role, you'll drive supply chain and cloud-native security across hundreds of services, designing hardened container images and securing Kubernetes workloads at scale.
Building
Go-based security automation, you'll work directly with engineering teams through Git PR workflows, committing patches yourself rather than just flagging issues. This is your opportunity to be a strong coder first and a security expert second, applying sharp engineering judgment to distinguish good code from bad, AI-generated or otherwise.
What You'll Do
- Design hardened container base images and secure Kubernetes workloads.
- Build Go-based security automation tooling.
- Drive vulnerability remediation with engineering teams via Git PR workflows, including committing patches directly.
- Perform SCA, SAST, and DAST triage, taking vulnerabilities from discovery to patch.
- Harden CI/CD pipelines, IaC templates, and Helm charts against supply chain risks.
What We Are Looking For
- 5+ years of experience in software engineering with a security focus.
- Strong proficiency in Go for security automation tooling.
- Experience with container security, including hardened base images, Kubernetes runtime security, network policies, and admission controllers.
- Experience with SCA and large-scale dependency vulnerability remediation, including SAST, DAST, and triage to patch.
- Background in supply chain security, including CI/CD hardening, IaC templates, Helm charts, and third-party dependencies.
- Experience with Terraform for provisioning security controls.
- Experience with AWS cloud security, with Azure as a secondary platform, focused on container orchestration.
- Experience applying AI to security, such as LLMs or MCP for automated vulnerability fixing or alert grouping, or a strong conceptual understanding of these approaches.
- Advanced proficiency in English.
Nice To Have
- Experience with Node.js development.
- Familiarity with Artifactory or JFrog.
- Experience with zero-CVE container vendors such as Chainguard or similar.
- Knowledge of the OWASP Top 10.
- Familiarity with supply chain frameworks such as SLSA.
- Experience with FIPS compliance and cipher migration.
How we do make your work (and your life) easier:
- 100% remote work (from anywhere).
- Excellent compensation in USD or your local currency if preferred
- Hardware and software setup for you to work from home.
- Adaptable hours: create your own schedule.
- Paid parental leaves, vacations, and national holidays.
- Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
- Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
Join a global team where your unique talents can truly thrive and make a significant impact! Apply now!
📌 Senior Security Engineer - Remote Work (Colombia)
🏢 BairesDev
📍 Colombia