Product Security Engineer

Responsibilities

• Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers.
• Identify and remediate security gaps in production systems and development pipelines.
• Lead incident response through triage, containment, remediation, and post-mortems.
• Partner with engineering on secure design reviews and operational security decisions.
• Establish practical, repeatable security practices for building, deploying, monitoring, and securing systems.
• Improve supply-chain security across dependencies, build systems, and deployment artifacts.
• Scale application-security coverage as Tempo’s infrastructure and product surface grow.

Requirements

• 5–8 years of hands-on product or application security engineering experience.
• Experience building security practices at a 100–500-person company or a similar environment with limited existing security infrastructure.
• Hands-on coding ability for security tooling, automation, and detection.
• Deep incident-response experience, including owning high-severity situations end to end.
• Strong infrastructure security knowledge covering hosting environments, network security, monitoring, and system integrations.
• Knowledge of application security fundamentals including threat modeling, secure code review, vulnerability management, and supply-chain security.
• Ability to communicate technical security decisions to engineers with depth and specificity.