Detection & Response Security Engineer (SIEM)

Vercel; San Francisco (CA); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Equity

Healthcare package

Mentorship & events

Flexible time off

WFH budget

Job summary

Vercel is seeking a Security Engineer to join our Detection Response team. You will manage Vercel’s internal CorpSec posture, monitor for security anomalies, build detections, and support audits across Engineering, GRC and Security.

If you are within commuting distance of SF, NY, London, or Berlin, you will have in-office anchor days; otherwise the role is fully remote. You will work on alerts, SIEM operations, and secure development practices company-wide.

Qualifications

• Extensive security operations experience including SIEM, logging, and detection engineering.
• Strong knowledge of AWS infrastructure and cloud security best practices.
• Experience with GitHub administration and security controls.
• Proficiency in SQL for data analysis and security investigations.
• Hands-on incident response including detection, triage, and remediation.
• Endpoint management across Mac/Windows/Linux.
• Scripting in Python or Bash and a compiled language like Rust or Go.
• Familiarity with serverless functions and API security is a plus.

Responsibilities

• Monitor and respond to security alerts across multiple channels.
• Maintain visibility and logging infrastructure for SIEM operations.
• Support audits (PCI, SOC2, ISO) and gather evidence with Engineering and GRC.
• Develop detections and security tooling; manage security partners.
• Handle incidents and on-call processes to improve efficiency.
• Guard business operations against risk-based changes.
• Manage email security, endpoint posture, GitHub security, and internal tooling.

Skills

Security operations

SIEM management

Cloud security

GitHub administration

SQL analysis

Incident response

Endpoint management

Scripting: Python/Bash

Go/Rust

Job description

Vercel is seeking a Security Engineer to join our Detection Response team. You will manage Vercel’s internal CorpSec posture, monitor for security anomalies, build detections, and support audits across Engineering, GRC and Security.

If you are within commuting distance of SF, NY, London, or Berlin, you will have in-office anchor days; otherwise the role is fully remote. You will work on alerts, SIEM operations, and secure development practices company-wide.