Product Security Engineer

About this role

Vercel is seeking a Product Security Engineer to enhance security across its products and platform by focusing on threat modeling, secure code review, and open-source software security. This remote position involves leading security initiatives, managing a bug bounty program, and embedding security within the software development lifecycle.

What you'll do

• Conduct threat modeling and design reviews.
• Perform secure code reviews and vulnerability assessments.
• Manage open-source security efforts for third-party packages.
• Integrate security tools into the software development lifecycle.
• Oversee and expand the bug bounty program.
• Lead cross-organizational security initiatives.

What they're looking for

• Threat modeling
• Secure code review
• Open-source software security
• SDLC tooling and automation
• Bug bounty program management
• Collaboration across teams
• Vulnerability assessment
• Developer education on security best practices

Benefits

• Fully remote work option
• In-office anchor days (if within commuting distance)
• Collaborative work culture
• Engagement with open-source community
• Opportunities for professional growth
• [Unknown]