Detection & Response Security Engineer

Vercel; San Francisco (CA); On-site; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive equity package

Inclusive healthcare

Mentorship & events

Flexible time off

Work-from-home budget

Job summary

Vercel is seeking a Security Engineer to join the Detection Response team. You will manage CorpSec posture, monitor for security anomalies, and build detections and visibility across internal systems. Location boosts in-office days for SF/NY/London/Berlin; otherwise, remote options apply.

You’ll work with multiple teams to support audits, improve visibility, and respond to incidents while advancing email and endpoint security, GitHub admin practices, and security tooling.

Qualifications

• Extensive experience in security operations including SIEM and detection engineering.
• Strong knowledge of AWS security best practices.
• Experience with GitHub security controls and incident response.

Responsibilities

• Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
• Maintain visibility and logging infrastructure for effective SIEM operations.
• Support audits for PCI, SOC2, ISO, and other frameworks with evidence collection.
• Develop and deploy new detections and security tooling.
• Handle security incidents, on-call responsibilities, and urgent requests.
• Guard the business by enabling risk-based changes and improving security posture.
• Manage email security, EDR, and internal security tooling.

Skills

Security operations

SIEM management

AWS cloud security

GitHub security controls

SQL for analysis

Incident response

Endpoint management

Scripting (Python/Bash)

Compiled languages (Rust/Go)

Serverless & API security

Tools

GitHub Admin

Job description

Vercel is seeking a Security Engineer to join the Detection Response team. You will manage CorpSec posture, monitor for security anomalies, and build detections and visibility across internal systems. Location boosts in-office days for SF/NY/London/Berlin; otherwise, remote options apply.

You’ll work with multiple teams to support audits, improve visibility, and respond to incidents while advancing email and endpoint security, GitHub admin practices, and security tooling.