Tessera Labs
Senior Product Security Engineer
$180K–$230K
Remote in the U.S. · Remote · Senior · Full-time · Posted Oct 21, 2026
About the job
Partners with product and platform engineers to secure the product throughout its lifecycle through design reviews, threat modeling, penetration testing, code reviews, and security tooling.
What you'll do
- Integrate security into the SDLC and lead security design reviews and threat modeling.
- Penetration-test web applications and APIs, review code, and help define secure-coding standards and acceptance criteria.
- Operate and tune SAST, DAST, and dependency/supply-chain scanning; triage findings and support compliance evidence.
What they ask for
- Strong track record measurably improving product or application security.
- Hands-on penetration testing of web applications and APIs.
- Deep understanding of modern web applications, authentication and authorization, and common attack methods.
- Experience with security design reviews and threat modeling; solid SDLC understanding and strong developer-facing communication skills.
Nice to have
- Familiarity with open-source security tools such as OWASP ZAP, Burp Suite Community Edition, Semgrep, Trivy, Grype, or Nuclei.
- Relevant offensive-security certification, cloud or container/Kubernetes security experience, or experience with compliance or regulated environments.
Pay
$180K – $230K USD base salary
Tools
OWASP ZAP, Burp Suite Community Edition, Semgrep, Trivy, Grype, Nuclei, Amazon Web Services, Microsoft Azure
Model-written summary · the original posting is authoritative