Senior Product Security Engineer — Remote

Tessera Labs; Philippines; Remote; PHP 7,643,000 - 11,465,000; Full time

Job summary

Tessera Labs is seeking a Senior Product Security Engineer to collaborate with developers and secure the product across its lifecycle. You will perform design reviews, threat modeling, and hands-on pentesting, integrating security into engineering workflows and driving secure coding practices.

Work is remote with international reach; you will partner with product and platform teams to embed security into SDLC and supporting compliance efforts.

Qualifications

• Proven track record in product or application security.
• Hands-on pentesting against web apps and APIs.
• Deep understanding of modern web apps, OAuth2/OpenID Connect, and OWASP Top 10.
• Experience leading security design reviews and threat modeling.
• Able to embed security into the SDLC and communicate risks clearly.
• Strong communication skills to collaborate with developers.

Responsibilities

• Partner with developers to secure the product across the SDLC.
• Lead security design and architecture reviews and run threat modeling.
• Perform hands-on pentesting of web apps and APIs and translate findings into fixes.
• Conduct secure code reviews and help define secure coding standards.
• Operate and tune SAST/DAST and dependency scanning; triage findings.
• Explain risks and mitigation strategies to engineers to prevent reoccurrence.
• Contribute to SOC 2, ISO 27001, and related compliance posture.

Skills

Product security

Penetration testing

Web application security

Threat modeling

Security design reviews

Secure SDLC

Communication

Tools

OWASP ZAP

Burp Suite

Semgrep

Trivy

Grype

Nuclei

Job description

Tessera Labs is seeking a Senior Product Security Engineer to collaborate with developers and secure the product across its lifecycle. You will perform design reviews, threat modeling, and hands-on pentesting, integrating security into engineering workflows and driving secure coding practices.

Work is remote with international reach; you will partner with product and platform teams to embed security into SDLC and supporting compliance efforts.