Product Security Engineer: Threat Modeling & Open Source

Vercel; San Francisco (CA); On-site; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive compensation package, including equity.

Inclusive Healthcare Package.

Flexible Time Off.

Job summary

Vercel is hiring a Product Security Engineer to drive product security initiatives across its platform. This role involves threat modeling, secure code review, open-source security, and automation of security checks in the development lifecycle.

The ideal candidate will have at least 5 years of experience, particularly in web security and SDLC processes, and will lead security-focused projects while collaborating closely with engineering teams.

The role offers competitive compensation and the opportunity to make a significant impact on the security of Vercel's products.

Qualifications

• Proven experience in securing web products and services.
• Proficient with vulnerability management in open source.
• Hands-on experience with SDLC security practices.

Responsibilities

• Drive security initiatives across Vercel's products.
• Lead cross-organizational security projects.
• Support customer-facing security programs.

Skills

Threat Modeling

Secure Code Review

Open Source Security

SDLC Tooling

Bug Bounty Management

Cross-Organizational Initiatives

Customer Security Support

Education

5 years of experience in Product Security

Tools

JavaScript

Node.js

GitHub Advanced Security

Job description

Vercel is hiring a Product Security Engineer to drive product security initiatives across its platform. This role involves threat modeling, secure code review, open-source security, and automation of security checks in the development lifecycle.

The ideal candidate will have at least 5 years of experience, particularly in web security and SDLC processes, and will lead security-focused projects while collaborating closely with engineering teams.

The role offers competitive compensation and the opportunity to make a significant impact on the security of Vercel's products.