Senior Security Engineer

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley. Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide. When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success. Senior Security Engineer at BairesDev In this role, you'll drive supply chain and cloud-native security across hundreds of services, designing hardened container images and securing Kubernetes workloads at scale. Building Go-based security automation, you'll work directly with engineering teams through Git PR workflows, committing patches yourself rather than just flagging issues. This is your opportunity to be a strong coder first and a security expert second, applying sharp engineering judgment to distinguish good code from bad, AI-generated or otherwise.

What You'll Do
Design hardened container base images and secure Kubernetes workloads. Build Go-based security automation tooling. Drive vulnerability remediation with engineering teams via Git PR workflows, including committing patches directly. Perform SCA, SAST, and DAST triage, taking vulnerabilities from discovery to patch. Harden CI/CD pipelines, IaC templates, and Helm charts against supply chain risks. What We Are Looking For 5+ years of experience in software engineering with a security focus. Strong proficiency in Go for security automation tooling. Experience with container security, including hardened base images, Kubernetes runtime security, network policies, and admission controllers. Experience with SCA and large-scale dependency vulnerability remediation, including SAST, DAST, and triage to patch. Background in supply chain security, including CI/CD hardening, IaC templates, Helm charts, and third-party dependencies. Experience with Terraform for provisioning security controls. Experience with AWS cloud security, with Azure as a secondary platform, focused on container orchestration. Experience applying AI to security, such as LLMs or MCP for automated vulnerability fixing or alert grouping, or a strong conceptual understanding of these approaches. Advanced proficiency in English. Nice To Have Experience with Node.js development. Familiarity with Artifactory or JFrog. Experience with zero-CVE container vendors such as Chainguard or similar. Knowledge of the OWASP Top 10. Familiarity with supply chain frameworks such as SLSA. Experience with FIPS compliance and cipher migration. How we do make your work (and your life) easier: 100% remote work (from anywhere). Excellent compensation in USD or your local currency if preferred Hardware and software setup for you to work from home. Flexible hours: create your own schedule. Paid parental leaves, vacations, and national holidays. Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent. Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities. Join a global team where your unique talents can truly thrive and make a significant impact Apply now