Platform Security Automation Engineer

vercel.com; Town of Berlin (NY); Remote; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive compensation

Equity

Inclusive Healthcare

Mentorship & events

WFH budget

Job summary

Vercel is seeking a security-focused software engineer to build agent-scale tooling for triaging and validating externally reported findings. You will push beyond signatures, using LLM-based reasoning, to validate, root-cause, and propose automated remediation within a scalable security platform.

Ideal candidates have a strong engineering background, comfort with JavaScript/TypeScript and Node.js, and an interest in enabling customers with robust security testing capabilities on the Vercel

Qualifications

• Strong software engineering background, with ability to design scalable systems.
• Experience with JavaScript/TypeScript and Node.js security tooling is a plus.
• Familiarity with security triage concepts and vulnerability validation.

Responsibilities

• Build tooling to triage and validate bug bounty and external findings at scale, automatically assessing validity, severity, and reproducibility.
• Develop agentic and LLM-based analysis to validate business logic, auth, and design-level findings.
• Trace validated findings to root causes and drive remediation strategies.
• Create automated remediation capabilities with proper human review gates.
• Rethink traditional security tooling for agent-scale operation and scale auditing.
• Own and evolve the bug bounty program, including scope and engagement.
• Extend tooling into customer-facing security testing capabilities for the platform.

Job description

Vercel is seeking a security-focused software engineer to build agent-scale tooling for triaging and validating externally reported findings. You will push beyond signatures, using LLM-based reasoning, to validate, root-cause, and propose automated remediation within a scalable security platform.

Ideal candidates have a strong engineering background, comfort with JavaScript/TypeScript and Node.js, and an interest in enabling customers with robust security testing capabilities on the Vercel