--- title: 'Senior Product Security Engineer at Tessera Labs' canonical: 'https://feeny.ai/job/senior-product-security-engineer-tessera-labs-brazil-9dsdjnsdr00h' type: 'job' last_seen: '2026-09-05' --- # Senior Product Security Engineer at Tessera Labs - **Company:** Tessera Labs - **Location:** Brazil - **Employment:** contract - **Work type:** remote - **Posted:** 2026-09-01 - **Last confirmed live:** 2026-09-05 - **Apply:** https://jobs.ashbyhq.com/tessera-labs/3a6fe2e0-68da-4d37-922d-47bd1801128c ## Job description Senior Product Security Engineer ## The Role We're hiring a Senior Product Security Engineer to work hand-in-hand with developers to secure the product across its entire lifecycle. You'll be the person who makes our platform defensible — through design reviews, threat modeling, hands-on penetration testing, and secure-coding partnership — and you'll do it as a collaborator who helps engineers ship securely, not a gatekeeper who slows them down. This role partners closely with product engineering and platform engineering teams. ## What You'll Do - Partner directly with developers to secure the product across the Software Development Life Cycle (SDLC), embedding security early rather than bolting it on at the end. - Lead security design and architecture reviews, and run threat modeling on new features and services. - Perform hands-on penetration testing of web applications and Application Programming Interfaces (APIs), and translate findings into clear, prioritized, fixable work. - Conduct secure code reviews and help define secure-coding standards and security acceptance criteria. - Operate and tune Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and dependency / supply-chain scanning, and triage what they surface. - Help engineers understand the "why" behind findings so the same class of issue doesn't recur. - Contribute security evidence and rigor to our compliance posture (System and Organization Controls 2, or SOC 2, ISO 27001, etc.). ## What You'll Need (Required) - A strong track record in product or application security — you've measurably made real products more secure. - Hands-on penetration testing experience against web applications and APIs. - Deep understanding of how modern web applications work — single-page front ends, APIs, authentication and authorization (for example, OAuth 2.0 / OpenID Connect), sessions, and the common ways each is attacked (for example, the Open Worldwide Application Security Project, or OWASP, Top 10). - Experience running security design reviews and threat modeling. - Solid understanding of the SDLC and how to embed security into it. - Strong communication skills — you work directly with developers and can explain risk in terms they'll act on. ## Nice to Have - Familiarity with open-source security tooling (for example, OWASP ZAP and Burp Suite Community Edition for testing, Semgrep for SAST, Trivy or Grype for dependency and container scanning, Nuclei for templated scanning). - A relevant offensive-security certification (for example, Offensive Security Certified Professional, or OSCP). - Cloud security experience (Amazon Web Services, Microsoft Azure, or Google Cloud Platform) and container / Kubernetes security. - Experience supporting a SOC 2, International Organization for Standardization (ISO) 27001, or similar program. - Background in enterprise or regulated environments where deployment security is non-negotiable. What Success Looks Like (First 90 Days) - You've reviewed the product's architecture and threat surface and identified the highest-priority security risks. - A repeatable, lightweight process exists for security design reviews on new work. - Security findings have a clear triage-to-remediation path, and developers know how to engage you early. Location and Work Model Remote in Brazil ## About Tessera Labs ## Company Overview - **One-liner**: Tessera Labs provides a multi-agent AI platform that accelerates and de-risks enterprise ERP and critical systems modernization. - **Entity Type**: Private (Series A; $60M raised) - **Headquarters**: San Jose, California, United States (also listed as Palo Alto, CA) - **Founded**: 2024 - **Founders**: Kabir Nagrecha, Ph.D. (CEO) and Anirudh Sriram (CTO) ## Core Business - **Primary industry**: Enterprise Software & AI – focused on ERP transformation and system integration. - **Target customers**: Large enterprises running SAP, Salesforce, Workday, Oracle, and other systems of record (B2B, Enterprise). - **Mission or purpose statement**: “Unifying the disparate pieces of the enterprise into a coherent whole” – making complex transformations faster, safer, and more cost-effective. ## Products & Services - **Tessera Platform (Multi-Agent AI)**: An AI-native, vendor-agnostic platform that automates data harmonization, code remediation, cross-system orchestration, and governance for ERP and connected systems. It compresses modernization timelines from years to weeks and reduces costs by more than half. [tesseralabs.ai](https://www.tesseralabs.ai/) ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed. - **Key Metric**: Total funding raised: $60M in Series A (May 2026). [cbinsights.com](https://www.cbinsights.com/company/tessera-labs) - **Notable Investors/Partners**: Andreessen Horowitz (a16z) led the Series A, with participation from Foundation Capital, Osage University Partners, Myriad Venture Partners, and A16Z GAMES. Key strategic advisors include Abdul Razack (EVP at Aon, ex-Google Cloud) and Prakash Gupta (founding CRO of Turing). [tesseralabs.ai/about](https://www.tesseralabs.ai/about) - **Growth Signals**: 35 employees with 4% monthly headcount growth; 38 active job postings (up 46.2% MoM); proven in $250M+ programs and regulated industries; Series A raised just one month ago (May 2026). [linkedin.com/company/tesseralabsai](https://www.linkedin.com/company/tesseralabsai) ## Competitive Advantages - **Vendor-agnostic platform** that works across SAP, Salesforce, Workday, and Oracle – avoiding lock-in unlike ERP vendor tools or point solutions. - **Pre-trained on thousands of enterprise landscapes** and backed by deep expertise (founders and leadership have backgrounds at SAP, Oracle, Google, Stanford AI Lab). - **Governance-first design**: every action is logged and traceable, built for regulated industries and audit compliance. - **Speed vs. incumbents**: compresses timelines by ~90% compared to traditional system integrators, and costs by more than half. ## Strategic Focus - **Current priorities**: Scaling the enterprise customer base, deepening multi-agent AI capabilities, and expanding the partner ecosystem. Hiring heavily across engineering, product, and consulting to support rapid go-to-market. - **Direction for growth**: Continue to displace legacy system integrators and internal IT teams with an AI-first, governed approach to ERP modernization. Target large-scale SAP S/4HANA migrations, CRM/HCM harmonizations, and connected-system orchestration. ## Why Work Here - **Culture highlights**: Described as “enterprise serious, AI forward” – a blend of deep enterprise gravity and cutting-edge AI research. Team includes PhDs, ex-Google/Microsoft/Netflix engineers, and former SAP directors. - **Remote/hybrid/office policy**: Not explicitly stated, but headquarters in San Jose (CA) and Palo Alto, and job postings suggest a mix of on-site and remote flexibility (e.g., multiple backend engineer roles, a Technical Program Manager). Expect hybrid with a strong in-office core. - **Notable perks or engineering culture**: Working on the frontier of enterprise AI with real-world impact on massive transformation projects. Opportunity to shape a new category of software. Leadership includes one of UC San Diego’s youngest PhDs and a YC alumnus. - **Open technical roles**: Backend engineers, data engineers (ERP data harmonization), DevOps, product design, SAP consultants – 38 open positions as of mid-2026. [jobs.ashbyhq.com/tessera-labs](https://jobs.ashbyhq.com/tessera-labs) ## Sources 1. [tesseralabs.ai](https://www.tesseralabs.ai/) 2. [tesseralabs.ai/about](https://www.tesseralabs.ai/about) 3. [linkedin.com/company/tesseralabsai](https://www.linkedin.com/company/tesseralabsai) 4. [cbinsights.com/company/tessera-labs](https://www.cbinsights.com/company/tessera-labs) 5. [jobs.ashbyhq.com/tessera-labs](https://jobs.ashbyhq.com/tessera-labs) ## Other roles at Tessera Labs - [Oracle Fusion Enterprise Architect](https://feeny.ai/job/oracle-fusion-enterprise-architect-tessera-labs-los-angeles-ykd8tndfa8f6) — Los Angeles, CA - [Senior QA Engineer](https://feeny.ai/job/senior-qa-engineer-tessera-labs-brazil-zw9g1r4xhqdg) — Brazil - [Technical GRC Analyst (Compliance & Assurance)](https://feeny.ai/job/technical-grc-analyst-compliance-assurance-tessera-labs-brazil-y0rmtmr9b5da) — Brazil - [Technical Program Manager, Oracle](https://feeny.ai/job/technical-program-manager-oracle-tessera-labs-los-angeles-6h7z5199sk1d) — Los Angeles, CA - [AI Platform Engineer](https://feeny.ai/job/ai-platform-engineer-tessera-labs-in-the-m446aa6jfrdt) — IN the, United States - [Oracle Fusion Cloud Lead — Logistics & Supply Chain Management](https://feeny.ai/job/oracle-fusion-cloud-lead-logistics-supply-chain-management-tessera-labs-brazil-n48vc9fktn3y) — Brazil - [Forward-Deployed Engineer](https://feeny.ai/job/forward-deployed-engineer-tessera-labs-new-york-papxk6cp5zhd) — New York, NY - [Product Manager](https://feeny.ai/job/product-manager-tessera-labs-san-jose-72ggb6039g55) — San Jose, CA - [Software Engineer, Backend](https://feeny.ai/job/software-engineer-backend-tessera-labs-san-jose-nx7448h2khsx) — San Jose, CA - [Research Scientist](https://feeny.ai/job/research-scientist-tessera-labs-san-jose-k5njz0z9015c) — San Jose, CA