Tessera Labs
Senior Product Security Engineer
Remote in the U.S · Senior
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- We're hiring a Senior Product Security Engineer to work hand-in-hand with developers to secure the product across its entire lifecycle.
Responsibilities
- Partner directly with developers to secure the product across the Software Development Life Cycle (SDLC), embedding security early rather than bolting it on at the end.
- Lead security design and architecture reviews, and run threat modeling on new features and services.
- Perform hands-on penetration testing of web applications and Application Programming Interfaces (APIs), and translate findings into clear, prioritized, fixable work.
- Experience running security design reviews and threat modeling.
- You'll be the person who makes our platform defensible - through design reviews, threat modeling, hands-on penetration testing, and secure-coding partnership - and you'll do it as a collaborator who helps engineers ship securely, not a gatekeeper who slows them down.
- This role partners closely with product engineering and platform engineering teams.
Requirements
- What You'll Need (Required)
- Strong communication skills - you work directly with developers and can explain risk in terms they'll act on.
Nice to have
- Familiarity with open-source security tooling (for example, OWASP ZAP and Burp Suite Community Edition for testing, Semgrep for SAST, Trivy or Grype for dependency and container scanning, Nuclei for templated scanning).
- A relevant offensive-security certification (for example, Offensive Security Certified Professional, or OSCP).
- Cloud security experience (Amazon Web Services, Microsoft Azure, or Google Cloud Platform) and container / Kubernetes security.
- Experience supporting a SOC 2, International Organization for Standardization (ISO) 27001, or similar program.
- Background in enterprise or regulated environments where deployment security is non-negotiable.
- What Success Looks Like (First 90 Days)
- You've reviewed the product's architecture and threat surface and identified the highest-priority security risks.
- Security findings have a clear triage-to-remediation path, and developers know how to engage you early.
This listing is sourced directly from Tessera Labs's careers page and normalized into a canonical job model.