Security Engineer - Scalable Bug Bounty Automation

Vercel; San Francisco (CA); Hybrid; USD 140,000 - 220,000; Full time

Job summary

Vercel in San Francisco seeks a security-focused software engineer to build scalable triage tooling for bug bounty and external findings. Design and operate systems that validate findings at volume, assess severity, and connect findings to root causes.

This role emphasizes automating remediation and agent-based reasoning with LLMs, moving beyond traditional pentesting. You’ll empower customers with security testing capabilities on the Vercel platform.

Qualifications

• Strong software engineering background is valued over traditional pentesting.
• Interest in security and willingness to move into security roles is preferred.

Responsibilities

• Build tooling to triage and validate bug bounty and external findings at scale, automating validity, severity, and reproducibility assessments.
• Develop agent-based reasoning with LLMs to verify business logic and design-level findings, beyond simple pattern matching.
• Trace validated findings to root causes and drive remediation, not just report fixes.
• Move toward automated remediation with appropriate human review gates.
• Rethink traditional security tooling to fit agent-driven scale and automation at Vercel.

Skills

Software engineering background

Security engineering interest

Job description

Vercel in San Francisco seeks a security-focused software engineer to build scalable triage tooling for bug bounty and external findings. Design and operate systems that validate findings at volume, assess severity, and connect findings to root causes.

This role emphasizes automating remediation and agent-based reasoning with LLMs, moving beyond traditional pentesting. You’ll empower customers with security testing capabilities on the Vercel platform.