Security Engineer - Detection & Response (Remote/Hybrid)

vercel.com; San Francisco (CA); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Equity

Healthcare

Mentorship and events

Flexible time off

WFH equipment budget

Job summary

Vercel in San Francisco seeks a Security Engineer to join the Detection Response team. You will manage Vercel’s CorpSec posture, monitor for security anomalies, and develop detections across internal systems to strengthen protection.

This role requires collaboration with Engineering, GRC and the broader Security Division to support audits, improve visibility, and respond to incidents, while maintaining a strong security posture for a fast-paced environment.

Qualifications

• Experience in security operations and SIEM management.
• Knowledge of AWS infrastructure and cloud security best practices.
• GitHub administration and security controls.
• SQL for data analysis and security investigations.
• Incident response with detection, triage, remediation.
• Endpoint management across macOS, Windows, Linux.
• Scripting in Python or Bash and one compiled language (Rust or Go).
• Familiarity with serverless functions and API security is a plus.

Responsibilities

• Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
• Maintain visibility and logging infrastructure, ensuring effective SIEM operations.
• Support security audits for PCI, SOC2, ISO, and other frameworks, gathering evidence with Eng, GRC and Security Division.
• Develop and deploy new detections and security tooling; manage key security partners.

Skills

SIEM management

Security logging

Detection engineering

AWS security

GitHub administration

SQL for data analysis

Incident response

Endpoint management

Python

Bash

Rust

Go

Serverless functions

Tools

GitHub

SIEM tooling

Cloud security tooling

Job description

Vercel in San Francisco seeks a Security Engineer to join the Detection Response team. You will manage Vercel’s CorpSec posture, monitor for security anomalies, and develop detections across internal systems to strengthen protection.

This role requires collaboration with Engineering, GRC and the broader Security Division to support audits, improve visibility, and respond to incidents, while maintaining a strong security posture for a fast-paced environment.