Senior Product Security Engineer — Threat Modeling & OSS (Remote)

vercel.com; San Francisco (CA); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive compensation package, including equity.

Inclusive Healthcare Package.

Flexible Time Off.

Work from Home budget.

Job summary

Vercel is seeking a Product Security Engineer to lead security initiatives across its products and platforms. In this high-impact role, you will focus on threat modeling, secure code review, and managing bug bounty programs, ensuring comprehensive security practices are embedded within the development lifecycle.

Your efforts will influence the safety of Vercel’s infrastructure and the broader open-source ecosystem. With a flexible work environment, Vercel encourages candidates to apply, emphasizing its inclusive commitment.

Qualifications

• 5+ years of experience in a Product Security or related role.
• Strong familiarity with JavaScript/TypeScript and Node.js security.
• Experience with secure development lifecycle practices.

Responsibilities

• Lead threat modeling and design reviews with engineering teams.
• Conduct secure code reviews and security assessments.
• Oversee open-source security efforts and vulnerability management.

Skills

Threat Modeling

Secure Code Review

Open Source Security Management

SDLC Tooling

Bug Bounty Management

Technical Leadership

Education

5+ years of experience in a Product Security role

Relevant security certifications (e.g. OSCP, OSWE)

Tools

GitHub Advanced Security

Snyk

Terraform security checks

Job description

Vercel is seeking a Product Security Engineer to lead security initiatives across its products and platforms. In this high-impact role, you will focus on threat modeling, secure code review, and managing bug bounty programs, ensuring comprehensive security practices are embedded within the development lifecycle.

Your efforts will influence the safety of Vercel’s infrastructure and the broader open-source ecosystem. With a flexible work environment, Vercel encourages candidates to apply, emphasizing its inclusive commitment.