--- title: Remote Senior Product Security Engineer at Tessera Labs description: Tessera Labs is hiring for the Senior Product Security Engineer role. Pays $50K–$60K per year. See the full description and apply. type: job url: https://www.foundrole.com/jobs/senior-product-security-engineer-at-tessera-labs-01a15f68-6269-7e31-8d03-411b1b3974c3 date: 2026-11-15T01:26:44Z og_description: Join Tessera Labs as Senior Product Security Engineer. Pays $50K–$60K per year. Full-time, remote role. og_image: https://www.foundrole.com/og/g90tua.png breadcrumbs: - label: Home url: https://www.foundrole.com/ - label: Search url: https://www.foundrole.com/jobs --- | | | |---|---| | **Company** | Tessera Labs | | **Location** | Remote | | **Salary** | $180K/yr - $230K/yr | | **Type** | Full Time | | **Posted** | Oct 21, 2026 | ## Remote check **Fully remote: passed our check.** The role itself is remote, with no recurring office days, travel under 10%, no on-site duties and no end date on the remote setup. - "Remote in Brazil or LATAM" **Where you can work from:** Brazil, LATAM ## Is this job real? **Ghost job check:** A- · Low risk. Probably a real opening. ## Visa sponsorship - **H-1B:** Tessera Labs sponsors H-1B visas. It filed 22 H-1B petitions (FY2026 Q1 – FY2026 Q4). - **E-Verify:** No E-Verify enrollment on record for Tessera Labs. ## Pay for similar jobs Most similar jobs pay $170,000 – $240,000 a year (median $205,000). ## Description **Senior Product Security Engineer** Remote in USA **The Role** We're hiring a **Senior** **Product Security Engineer** to work hand-in-hand with developers to secure the product across its entire lifecycle. You'll be the person who makes our platform defensible — through design reviews, threat modeling, hands-on penetration testing, and secure-coding partnership — and you'll do it as a collaborator who helps engineers ship securely, not a gatekeeper who slows them down. This role partners closely with product engineering and platform engineering teams. **What You'll Do** - Partner directly with developers to secure the product across the Software Development Life Cycle (SDLC), embedding security early rather than bolting it on at the end. - Lead security design and architecture reviews, and run threat modeling on new features and services. - Perform hands-on penetration testing of web applications and Application Programming Interfaces (APIs), and translate findings into clear, prioritized, fixable work. - Conduct secure code reviews and help define secure-coding standards and security acceptance criteria. - Operate and tune Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and dependency / supply-chain scanning, and triage what they surface. - Help engineers understand the "why" behind findings so the same class of issue doesn't recur. - Contribute security evidence and rigor to our compliance posture (System and Organization Controls 2, or SOC 2, ISO 27001, etc.). **What You'll Need (Required)** - A strong track record in product or application security — you've measurably made real products more secure. - Hands-on penetration testing experience against web applications and APIs. - Deep understanding of how modern web applications work — single-page front ends, APIs, authentication and authorization (for example, OAuth 2.0 / OpenID Connect), sessions, and the common ways each is attacked (for example, the Open Worldwide Application Security Project, or OWASP, Top 10). - Experience running security design reviews and threat modeling. - Solid understanding of the SDLC and how to embed security into it. - Strong communication skills — you work directly with developers and can explain risk in terms they'll act on. **Nice to Have** - Familiarity with open-source security tooling (for example, OWASP ZAP and Burp Suite Community Edition for testing, Semgrep for SAST, Trivy or Grype for dependency and container scanning, Nuclei for templated scanning). - A relevant offensive-security certification (for example, Offensive Security Certified Professional, or OSCP). - Cloud security experience (Amazon Web Services, Microsoft Azure, or Google Cloud Platform) and container / Kubernetes security. - Experience supporting a SOC 2, International Organization for Standardization (ISO) 27001, or similar program. - Background in enterprise or regulated environments where deployment security is non-negotiable. **What Success Looks Like (First 90 Days)** - You've reviewed the product's architecture and threat surface and identified the highest-priority security risks. - A repeatable, lightweight process exists for security design reviews on new work. - Security findings have a clear triage-to-remediation path, and developers know how to engage you early. **Location and Work Model** Remote in Brazil or LATAM ## Skills - Open Web Application Security Project (Owasp) - Amazon Web Services - Application Programming Interface (Api) - Application Security - OWASP ZAP - OpenID Connect - Penetration Testing - SOC 2 Compliance - Open-Source Software - Triage - Software Architecture Review - Offensive Security Certified Professional (Oscp) - Trivy - Software Deployment - Authentication (Software Security) - Static Application Security Testing (Sast) - Container Scanning - Dynamic Application Security Testing (Dast) - Microsoft Azure - Kubernetes - Offensive Security - Software Development Life Cycle - Supply Chain - Burp Suite - ISO/IEC 27001 Certification - Google Cloud Platform (Gcp) - Semgrep - Grype - Cloud Security and Compliance - Communication - Secure Coding - Threat Modeling - OAuth - IT Security Architecture ## Related - [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [Cybersecurity jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity?utm_source=ai_markdown)- [Security Engineer jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity/security-engineer?utm_source=ai_markdown)- [Cybersecurity Engineer jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity/security-engineer/cybersecurity-engineer?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown) ## Related pages - [Software Products](https://www.foundrole.com/sectors/technology/software-products?utm_source=ai_markdown) — 118921 jobs ## Browse - [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown) - [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown) - [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown) - [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown) - [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown) - [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown) - [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown) - [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)