Security Operations Engineer Hybrid - San Francisco

vercel.com; San Francisco (CA); Hybrid; USD 216,000 - 290,000; Full time

Job summary

An innovative firm is seeking a Staff Security Operations Engineer to enhance its security framework. This hybrid role offers the opportunity to manage internal security posture, monitor for anomalies, and collaborate with various teams to ensure compliance and security. You will be at the forefront of security operations, developing new detections and improving incident response processes. If you're passionate about security and eager to make a significant impact in a fast-paced environment, this role is perfect for you. Join a team that values inclusivity and professional growth, where you can truly thrive.

Benefits

Equity Compensation

Mentorship Opportunities

Event Attendance

Flexible Time Off

Work From Home Budget

Qualifications

• Extensive experience in security operations and SIEM management.
• Strong knowledge of AWS security best practices and GitHub administration.

Responsibilities

• Monitor and respond to security alerts across multiple channels.
• Support security audits and enhance security operations.

Skills

Security Operations

SIEM Management

AWS Infrastructure

SQL

Incident Response

Endpoint Management

Scripting Languages (Python, Bash)

Compiled Languages (Rust, Go)

Tools

GitHub

Security Automation Platforms

Job description

Vercel’s Frontend Cloud provides the developer experience and infrastructure to build, scale, and secure a faster, more personalized web. Customers like Under Armour, eBay, The Washington Post, Johnson & Johnson, and Zapier use Vercel to build dynamic user experiences on the web.

At Vercel, our mission is to enable the world to ship the best products and that goes hand in hand with creating an environment where you can do the best work of your life.

About the Role:

We are looking for a Staff Security Operations Engineer to join our Security team. In this role, you will be responsible for managing Vercel’s internal Corporate Security (CorpSec) posture, monitoring for security anomalies, building additional detections and visibility mechanisms, and ensuring the overall security of our internal systems. You will work closely with various teams to support audits, optimize visibility, and handle security incidents as they arise.

This is a hybrid role based at our San Francisco office with two days in the office per week.

What You Will Do:

1. Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
2. Maintain visibility and logging infrastructure, ensuring effective SIEM (Security Information and Event Management) operations.
3. Support security audits for PCI, SOC2, ISO, and other compliance frameworks, gathering evidence and collaborating with Engineering, GRC and the broader Security Division.
4. Proactively enhance security operations by developing and deploying new detections, security tooling and rigorously managing key security partners.
5. Work on security investigations, incidents, and urgent requests as they arise, as well as contributing to the build-out and continuous improvement of the on-call process to enhance efficiency and effectiveness.
6. Continuously act as a guardian to enable the business to navigate risk-based changes.
7. Manage and enhance email security, endpoint security posture (EDR, configuration, and management), GitHub administration best practices, and internal security tooling to strengthen Vercel's overall security framework.

About You:

1. Extensive experience in security operations, including SIEM management, security logging, and detection engineering.
2. Strong knowledge of AWS infrastructure and cloud security best practices.
3. Experience with GitHub administration and security controls.
4. Proficiency in SQL for data analysis and security investigations.
5. Hands-on experience with incident response, including detection, triage, and remediation.
6. Strong endpoint management skills across multiple operating systems (Mac, Windows, Linux).
7. Proficiency in at least one scripting language (Python, Bash) and one compiled language (Rust, Go).
8. Familiarity with serverless functions and API security is a plus.

Bonus If You:

1. Have experience working with managed SOC providers and security automation platforms.
2. Have worked in high-growth, cloud-native environments with a focus on scalability.
3. Are comfortable working in a fast-paced environment with shifting priorities.

Competitive compensation package, including equity.

Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.

Flexible Time Off.

We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $216,000-$290,000. This salary range is an estimate. Actual salary will be based on job-related skills, experience, and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.

Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Apply Now.

Tell us why you’d be a good fit for the Security Operations Engineer role.