Senior Product Security Engineer

Job not on LinkedIn

🔥 3 minutes ago

🇧🇷 Brazil – Remote

💵 $50k - $60k / year

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tessera Labs

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

Artificial Intelligence • Enterprise • SaaS

Tessera Labs is a vendor-agnostic, multi-agent AI systems integration platform that gives enterprises a single, unified view across their IT architecture. Pre-trained on thousands of enterprise landscapes and hundreds of years of business process expertise, Tessera adapts to each customer environment to harmonize systems and data and to enable secure, governed execution across ERP and other critical systems. The company emphasizes enterprise-grade governance and controls for regulated industries, accelerating time-to-value while evolving with new data and workflows, and is built on published AI research and patented technology.

📋 Description

• Partner with developers to secure the product across the SDLC • Lead security design and architecture reviews • Run threat modeling on new features and services • Perform hands-on penetration testing of web applications and APIs • Translate findings into clear, prioritized, fixable work • Conduct secure code reviews • Help define secure-coding standards and security acceptance criteria • Operate and tune SAST, DAST, and dependency/supply-chain scanning • Triage security findings • Help engineers understand the reasons behind findings and prevent recurrence • Contribute security evidence and rigor to SOC 2, ISO 27001, and similar compliance programs • Review the product's architecture and threat surface and identify highest-priority security risks within the first 90 days • Establish a repeatable process for security design reviews • Create a clear triage-to-remediation path for security findings

🎯 Requirements

• A strong track record in product or application security • Hands-on penetration testing experience against web applications and APIs • Deep understanding of modern web applications, including single-page front ends, APIs, authentication and authorization, sessions, and common attack methods such as the OWASP Top 10 • Experience running security design reviews and threat modeling • Solid understanding of the SDLC and embedding security into it • Strong communication skills and ability to explain risk to developers • Familiarity with OWASP ZAP, Burp Suite Community Edition, Semgrep, Trivy or Grype, and Nuclei (nice to have) • Relevant offensive-security certification such as OSCP (nice to have) • Cloud security experience with AWS, Azure, or Google Cloud Platform and container/Kubernetes security (nice to have) • Experience supporting SOC 2, ISO 27001, or similar programs (nice to have) • Background in enterprise or regulated environments (nice to have)