Senior Cloud Security Engineer — Remote

Mosaec; San Francisco (CA); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Equity

Healthcare

Mentorship & events

Flexible time off

WFH budget

Job summary

Vercel is seeking a Security Engineer to join our Cloud Security Engineering team. You will design scalable security controls across a cloud-native platform, and help harden infrastructure using IaC, policy enforcement, and service isolation.

This is a hybrid or fully remote role within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.

Qualifications

• 8+ years in infrastructure or platform security roles.
• Deep understanding of secure cloud infrastructure (AWS/GCP), IAM, and system hardening.
• Proficient with Terraform, CDK, Kubernetes, and CI/CD security.
• Proven track record of shipping secure, resilient systems at scale.

Responsibilities

• Design and implement scalable security controls across our cloud-native platform.
• Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
• Build secure by default infrastructure and code CI/CD pipelines.
• Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
• Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
• Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
• Drive improvements in monitoring, detection, and incident response at the platform level.
• Build, deploy and maintain relevant tooling.

Skills

Cloud security

Infrastructure security

IAM

Security architecture

Education

Bachelor's or Master's in Cybersecurity or related field

Tools

Terraform

CDK

Kubernetes

CI/CD security

Job description

Vercel is seeking a Security Engineer to join our Cloud Security Engineering team. You will design scalable security controls across a cloud-native platform, and help harden infrastructure using IaC, policy enforcement, and service isolation.

This is a hybrid or fully remote role within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.