Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently.
You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.
The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.
Designs and maintains secure enterprise infrastructure across on-premises and cloud environments, setting architecture standards, governing identity and access, and strengthening security monitoring and detection.
Own hands-on security across product and infrastructure, from vulnerability management and threat modeling to incident response, cloud hardening, and automation that reduces risk as the platform scales.
Build and mature insider threat detection and response capabilities by engineering detections, hunting for threats, automating investigations, and coordinating incident response across technical and business teams.
Secures software and cloud systems by reviewing code, modeling threats, automating security controls, and running attack simulations, while partnering with Engineering to prioritize and close vulnerabilities.
Own and strengthen the unclassified environment’s cybersecurity posture by implementing NIST SP 800-171 and CMMC Level 2 controls, conducting self-assessments, maintaining audit evidence, and vetting tools and vendors.
