Product Security Engineer

The Role

Responsibilities

• Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers
• Identify and remediate security gaps across Tempo's production systems and development pipelines
• Lead incident response end-to-end: triage, containment, remediation, and post-mortems
• Partner with engineering on secure design reviews and operational security decisions
• Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured
• Improve supply-chain security across dependencies, build systems, and deployment artifacts
• Scale application-security coverage as Tempo's infrastructure and product surface grow
• Operate with autonomy, build what's needed without waiting for large-company support structures

Qualifications

• 5–8 years of hands-on product or application security engineering experience
• Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure
• Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations
• Deep incident-response experience including high-severity situations owned end-to-end
• Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations
• Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security
• Comfortable communicating technical security decisions to engineers with real depth and specificity