Vercel

4 weeks ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Lead security initiatives across Vercel’s products and platform with a focus on threat modeling, open-source software security, secure code review, SDLC tooling, and bug-bounty program management. Drive security-forward culture, influence engineering teams, secure Next.js/Node.js/serverless infrastructure, and strengthen open-source ecosystems through proactive security practices and cross-functional collaboration.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Threat modeling and design review with engineering and product teams to identify risks early and recommend security controls or design changes.
•Secure code review and security assessments for products built with Next.js, Node.js, and serverless backends, providing remediation guidance.
•Open source security management, including monitoring third-party vulnerabilities and coordinating fixes for open-source projects we maintain or contribute to.
•SDLC tooling and automation, integrating security checks (e.g., GHAS) into CI/CD pipelines and GitHub workflows.
•Bug bounty program management, triaging vulnerability reports, coordinating cross-team remediation, and refining policies and scope.

Pay and Benefits

Salary: USD 208,000 - 312,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceEquity

Key Requirements

•5+ years of experience in product security or a closely related field, with a track record of securing web products and services.

Experience:5+ years

Skills:CommunicationLeadershipProblem-solving

Languages:English

Tech Stack:Next.jsNode.jsJavaScriptTypeScriptServerlessGHASGitHubSASTDASTDependabotSnyk

Company Brief

Vercel

Provides a frontend cloud platform and developer tools (including Next.js and v0) that simplify building, deploying, and scaling web and AI-native applications for developers and enterprises.

Industry: Cloud Computing

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series F

Headquarters: San Francisco, United States

Founded: 2015

Glassdoor: 4.1

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Vercel

4 weeks ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Threat modeling and design review with engineering and product teams to identify risks early and recommend security controls or design changes.
•Secure code review and security assessments for products built with Next.js, Node.js, and serverless backends, providing remediation guidance.
•Open source security management, including monitoring third-party vulnerabilities and coordinating fixes for open-source projects we maintain or contribute to.
•SDLC tooling and automation, integrating security checks (e.g., GHAS) into CI/CD pipelines and GitHub workflows.
•Bug bounty program management, triaging vulnerability reports, coordinating cross-team remediation, and refining policies and scope.

Pay and Benefits

Salary: USD 208,000 - 312,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceEquity

Key Requirements

•5+ years of experience in product security or a closely related field, with a track record of securing web products and services.

Experience:5+ years

Skills:CommunicationLeadershipProblem-solving

Languages:English

Tech Stack:Next.jsNode.jsJavaScriptTypeScriptServerlessGHASGitHubSASTDASTDependabotSnyk

Company Brief

Vercel

Provides a frontend cloud platform and developer tools (including Next.js and v0) that simplify building, deploying, and scaling web and AI-native applications for developers and enterprises.

Industry: Cloud Computing

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series F

Headquarters: San Francisco, United States

Founded: 2015

Glassdoor: 4.1

Website LinkedIn Glassdoor