Product Security Engineer

Vercel
United States, San Francisco, Berlin, London, New York
Workplace: RemoteFull timeUSD 208,000 - 312,000 annuallyFunction: CybersecurityExperience: 5+ yearsSkills: ["Communication","Leadership","Problem-solving"]

Lead security initiatives across Vercel’s products and platform with a focus on threat modeling, open-source software security, secure code review, SDLC tooling, and bug-bounty program management. Drive security-forward culture, influence engineering teams, secure Next.js/Node.js/serverless infrastructure, and strengthen open-source ecosystems through proactive security practices and cross-functional collaboration.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Vercel
Vercel
2 months ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Lead security initiatives across Vercel’s products and platform with a focus on threat modeling, open-source software security, secure code review, SDLC tooling, and bug-bounty program management. Drive security-forward culture, influence engineering teams, secure Next.js/Node.js/serverless infrastructure, and strengthen open-source ecosystems through proactive security practices and cross-functional collaboration.
Location: United States, San Francisco, Berlin, London, New York
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Threat modeling and design review with engineering and product teams to identify risks early and recommend security controls or design changes.
  • •Secure code review and security assessments for products built with Next.js, Node.js, and serverless backends, providing remediation guidance.
  • •Open source security management, including monitoring third-party vulnerabilities and coordinating fixes for open-source projects we maintain or contribute to.
  • •SDLC tooling and automation, integrating security checks (e.g., GHAS) into CI/CD pipelines and GitHub workflows.
  • •Bug bounty program management, triaging vulnerability reports, coordinating cross-team remediation, and refining policies and scope.

Pay and Benefits

Salary: USD 208,000 - 312,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceEquity

Key Requirements

  • •5+ years of experience in product security or a closely related field, with a track record of securing web products and services.
Experience:5+ years
Skills:CommunicationLeadershipProblem-solving
Languages:English
Tech Stack:Next.jsNode.jsJavaScriptTypeScriptServerlessGHASGitHubSASTDASTDependabotSnyk

Company Brief

Vercel
Provides a frontend cloud platform and developer tools (including Next.js and v0) that simplify building, deploying, and scaling web and AI-native applications for developers and enterprises.
Industry: Cloud Computing
Company Size: Large (251 to 1,000 employees)
Revenue: USD 100M to 250M
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series F
Headquarters: San Francisco, United States
Founded: 2015
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor