Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage
Extend the tooling into security testing capabilities that customers can use on what they build and deploy
What you need
5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools
Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React
Built with LLM or agent-based tooling
Reproduced and assessed externally reported vulnerabilities, including judging severity
Bonus if you
Built security automation used across an engineering org, not just for your own team
Built systems that auto-generate or propose code fixes, not just findings
Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure
Compensation & Benefits
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures
Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.
Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
