Product Security Engineer — Threat Modeling & Open Source

Vercel; United States; Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive compensation package

Flexible Time Off

Mentorship and professional development

Job summary

Vercel is seeking a Product Security Engineer to enhance security across its products and platform. In this role, you will drive initiatives related to threat modeling, secure code review, bug bounty management, and integrate security into the development lifecycle. You'll lead cross-organizational projects, ensuring security practices are embedded in engineering teams.

This position offers both in-office and fully remote options, depending on location. The ideal candidate has over 5 years of experience in product security and a strong understanding of security tooling and practices.

Qualifications

• Experience in a Product Security role with a track record of securing web products.
• Ability to perform threat modeling and SDLC integration.
• Hands-on experience with security tools and automation in CI/CD.

Responsibilities

• Lead threat modeling efforts for product features.
• Conduct secure code reviews and security assessments.
• Manage the bug bounty program and respond to vulnerabilities.
• Integrate security tooling into the development lifecycle.

Skills

Threat Modeling

Secure Code Review

Open Source Security Management

Automation

Bug Bounty Management

Cloud Security

Technical Leadership

Education

5+ years in Product Security

Tools

GitHub Advanced Security

Static Analysis Tools

Dependency Scanners

Job description

Vercel is seeking a Product Security Engineer to enhance security across its products and platform. In this role, you will drive initiatives related to threat modeling, secure code review, bug bounty management, and integrate security into the development lifecycle. You'll lead cross-organizational projects, ensuring security practices are embedded in engineering teams.

This position offers both in-office and fully remote options, depending on location. The ideal candidate has over 5 years of experience in product security and a strong understanding of security tooling and practices.