Tempo (tempo.xyz) Logo

Tempo (tempo.xyz)

Product Security Engineer

Posted 2 Months Ago
Remote
Hiring Remotely in USA
Senior level
Remote
Hiring Remotely in USA
Senior level
Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.
The summary above was generated by AI

Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.

 

Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.

 

We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.

 

We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!

The Role

You'll be Tempo's first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You'll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain.

Responsibilities
  • Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers

  • Identify and remediate security gaps across Tempo's production systems and development pipelines

  • Lead incident response end-to-end: triage, containment, remediation, and post-mortems

  • Partner with engineering on secure design reviews and operational security decisions

  • Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured

  • Improve supply-chain security across dependencies, build systems, and deployment artifacts

  • Scale application-security coverage as Tempo's infrastructure and product surface grow

  • Operate with autonomy, build what's needed without waiting for large-company support structures

Qualifications
  • 5–8 years of hands-on product or application security engineering experience

  • Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure

  • Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations

  • Deep incident-response experience including high-severity situations owned end-to-end

  • Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations

  • Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security

  • Comfortable communicating technical security decisions to engineers with real depth and specificity

HQ

Tempo (tempo.xyz) South San Francisco, California, USA Office

South San Francisco, CA, United States

Similar Jobs

Yesterday
Remote or Hybrid
San Francisco, CA, USA
227K-310K Annually
Senior level
227K-310K Annually
Senior level
Artificial Intelligence • Information Technology • Machine Learning • Natural Language Processing • Productivity • Software • Generative AI
The Product Security Engineer secures Superhuman’s products and AI systems across the software development lifecycle. Responsibilities include threat modeling, design reviews, secure code reviews, manual testing, vulnerability mitigation, security tooling and automation, bug bounty program improvements, and AI-based security tools. The role partners with engineering teams, communicates security risks and trade-offs, and helps establish secure-by-default platforms and identity models.
Top Skills: BugcrowdDastGoHackeroneJavaJavaScriptPythonSastSca
9 Days Ago
Remote or Hybrid
Santa Clara, CA, USA
201K-352K Annually
Senior level
201K-352K Annually
Senior level
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Lead product security incident response for post-release vulnerabilities, including deep investigations, exploit analysis, CVE assignment, CVSS scoring, coordinated disclosure, remediation tracking, and postmortems. Coordinate engineering, product, release, security, and external research teams during significant security events. Improve secure development practices and vulnerability response processes across the SaaS platform while participating in on-call coverage.
Top Skills: AWSAzureCi/CdCvssGCPJavaJavaScriptPython
9 Days Ago
Remote or Hybrid
181K-317K Annually
Senior level
181K-317K Annually
Senior level
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Lead product security incident response for post-release vulnerabilities, including deep-dive investigations, exploit analysis, remediation coordination, CVE assignment and disclosure, advisory review, and incident leadership. Partner with engineering, product, release, customer-facing, and external security teams to reduce exposure windows, verify fixes, conduct postmortems, and improve secure development processes and PSIRT capabilities.
Top Skills: AWSAzureCi/CdContainerized EnvironmentsCvssGCPJavaJavaScriptPythonSaaSSdlc

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account