Product Security Engineer

The role

You will be the first dedicated product security engineer standing up application and infrastructure security. You will build security tooling, respond to incidents, and work with engineering to secure systems.

What you will do

• Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers
• Identify and remediate security gaps across production systems and development pipelines
• Lead incident response end-to-end including triage, containment, remediation, and post-mortems
• Partner with engineering on secure design reviews and operational security decisions
• Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured
• Improve supply-chain security across dependencies, build systems, and deployment artifacts
• Scale application-security coverage as infrastructure and product surface grow
• Operate with autonomy to build what is needed

Required qualifications

• 5–8 years of hands-on product or application security engineering experience
• Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure
• Hands-on coding ability to build security tooling, automation, and detection
• Deep incident-response experience including high-severity situations owned end-to-end
• Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations
• Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security
• Comfortable communicating technical security decisions to engineers with real depth and specificity

About the company

Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments. It was born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.