Product Security Engineer

Tempo; New York (NY); On-site; USD 130,000 - 190,000; Full time

Job summary

Tempo in New York is seeking a dedicated product security engineer to build tooling and secure our infrastructure from the ground up. You will respond to incidents and collaborate with engineering to secure systems used by enterprise customers on‑chain.

You will lead end‑to‑end incident response, strengthen supply‑chain security, and establish practical security practices as Tempo scales its platform for high‑volume payments and real‑world use cases.

Qualifications

• 5–8 years of hands-on product or application security engineering experience.
• Experience building security practices at a company with limited existing security infrastructure.
• Hands-on coding ability to build security tooling and automation.
• Deep incident-response experience including end-to-end handling.
• Strong infrastructure security knowledge across hosting, networks, monitoring, and integrations.
• Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security.
• Able to communicate technical security decisions to engineers with depth.

Responsibilities

• Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and applications.
• Identify and remediate security gaps across production systems and pipelines.
• Lead incident response end-to-end: triage, containment, remediation, and post-mortems.
• Partner with engineering on secure design reviews and security decisions.
• Establish repeatable security practices for how systems are built, deployed, monitored and secured.
• Improve supply-chain security across dependencies, build systems, and deployment artifacts.
• Scale application-security coverage as Tempo’s infrastructure and product surface grows.
• Operate with autonomy and build what’s needed without waiting for large-company support.

Skills

Security engineering

Incident response

Threat modeling

Secure coding

Security automation

Job description

Tempo is a layer‑1 blockchain purpose‑built for stablecoins and real‑world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.

Tempo’s payment‑first design provides a scalable, low‑cost predictable backbone that meets the needs of high‑volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century. We’re building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more. We’re a team of crypto‑optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!

The Role

You’ll be Tempo’s first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You’ll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain.

Responsibilities

• Build and deploy security tooling across endpoint management, supply‑chain security, infrastructure, and application layers
• Identify and remediate security gaps across Tempo’s production systems and development pipelines
• Lead incident response end‑to‑end: triage, containment, remediation, and post‑mortems
• Partner with engineering on secure design reviews and operational security decisions
• Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured
• Improve supply‑chain security across dependencies, build systems, and deployment artifacts
• Scale application‑security coverage as Tempo’s infrastructure and product surface grow
• Operate with autonomy, build what’s needed without waiting for large‑company support structures

Qualifications

• 5–8 years of hands‑on product or application security engineering experience
• Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure
• Hands‑on coding ability: you build security tooling, automation, and detection, not just recommendations
• Deep incident‑response experience including high‑severity situations owned end‑to‑end
• Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations
• Application security fundamentals: threat modeling, secure code review, vulnerability management, supply‑chain security
• Comfortable communicating technical security decisions to engineers with real depth and specificity