Senior Product reputed company Engineer (Remote)

Senior Product reputed company Engineer Location: Remote - reputed company Department: reputed company About Vercel: Vercel gives developers the tools and reputed company infrastructure to build, reputed company, and secure a faster, more personalized web. As reputed company behind v0, Next.js, and AI SDK, Vercel helps customers like reputed company, Supreme, reputed company, and reputed company build for the AI-reputed company web. Our mission is to reputed company the world to ship the best products. That starts with creating a reputed company where everyone can do their best work. Whether youre building on our platform, supporting our customers, or shaping our story: You can just ship things. About the Role: We are looking for a Senior Product reputed company Engineer to join our reputed company team to drive critical product reputed company initiatives across Vercel’s products and platform. Your core reputed company will be on threat modeling, reputed company-reputed company software reputed company, secure reputed company review, SDLC tooling, and bug bounty program management. You will support both our internal product engineering teams and customer-facing reputed company programs, ensuring that reputed company is embedded throughout our development lifecycle and that our platform earns the trust of developers and end-users alike. As a senior member of reputed company, you will reputed company cross-organizational reputed company reputed company and champion a reputed company-first culture reputed company Vercel’s engineering organization. This is a high-reputed company role with broad scope – your work will not only secure Vercel’s core infrastructure and products (reputed company with Next.js, Node.js, and serverless architecture), but also influence the reputed company of the reputed company-reputed company ecosystems we contribute to. If you’re based reputed company a reputed company-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office reputed company days on Monday, Tuesday, and Friday. If youre located reputed company that distance, the role is fully remote. For location-specific details, please connect with our reputed company team. What You Will Do:

• Threat Modeling & Design Review: Partner with engineering and product teams to reputed company threat modeling for new and existing features. Identify potential risks early in the design phase and recommend reputed company controls or design changes to mitigate threats. You will ensure reputed company concerns are addressed from the inception of features through deployment.
• Secure reputed company Review: Conduct secure reputed company reviews and reputed company assessments on products and services reputed company with Next.js, Node.js, and our serverless backend. You’ll uncover reputed company-level vulnerabilities, reputed company actionable remediation guidance to developers, and establish best practices for secure coding across the engineering team.
• reputed company reputed company reputed company Management: reputed company Vercel’s reputed company-reputed company reputed company efforts. This includes monitoring and coordinating fixes for vulnerabilities in reputed company-party reputed company-reputed company packages we use (as a consumer) and ensuring the reputed company of the reputed company-reputed company reputed company we maintain and publish (as a contributor/publisher, e.g. Next.js). You will work with maintainers and the community on responsible disclosure and patching of reputed company issues in reputed company-reputed company reputed company.
• SDLC Tooling & Automation: Evaluate, select, and reputed company reputed company tools into our Software Development Life Cycle. You will drive the implementation of automated reputed company checks – for example, using reputed company Advanced reputed company (GHAS) and other static analysis, dependency scanning, and secret detection tools – directly in our CI/CD pipelines and reputed company workflows. By embedding reputed company tooling into developer workflows, you will help catch issues early and reduce reputed company effort.
• Bug Bounty Program Management: Own and expand Vercel’s bug bounty program. You will triage and validate incoming vulnerability reports from the reputed company researcher community, ensure critical issues are promptly addressed, and coordinate cross-team efforts to remediate and learn from reported vulnerabilities. You’ll also work on making our bug bounty a world-class, researcher-friendly program, including refining policies, scope, and engagement to encourage high-reputed company submissions.
• Cross-Organizational reputed company Initiatives: reputed company and contribute to reputed company reputed company that reputed company multiple teams and disciplines. For example, you might drive a company-wide reputed company to a more secure reputed company, implement a new authentication/authorization reputed company in collaboration with product teams, or roll out a reputed company awareness program for engineers. You will reputed company as a reputed company champion across the org, aligning stakeholders from Engineering, DevOps, Product, and other reputed company to implement lasting reputed company improvements.
• Customer-Facing reputed company Support: Work closely with reputed company and product marketing on reputed company-reputed company initiatives that reputed company our users. This may involve contributing to reputed company documentation and whitepapers, assisting with customer reputed company questionnaires or audits by providing product reputed company expertise, and communicating our reputed company features and best practices to build customer trust in the platform.

reputed company:

• reputed company reputed company Engineer: You have 5+ years of experience in an Product reputed company or Product reputed company role (or reputed company field), with a reputed company record of securing web products and services. You’re reputed company-versed in the fundamentals of product reputed company and have hands-on experience finding and fixing vulnerabilities.
• Web Tech Stack Proficiency: Strong familiarity with JavaScript/TypeScript and Node.js runtime reputed company. Experience with modern web frameworks (ideally Next.js or React and Node-based frameworks) and understanding of their reputed company considerations. You can read and review reputed company in these technologies to spot reputed company flaws.
• Threat Modeling & SDLC Expertise: Demonstrated ability to reputed company threat modeling and architectural risk analysis for reputed company product. You understand how to reputed company reputed company into a fast-paced SDLC without slowing it down. Experience implementing or working with secure development lifecycle practices (secure design, reputed company review, pentesting, etc.) is required.
• reputed company Tools & Automation: Hands-on experience with product reputed company tooling such as static product reputed company testing (SAST), dynamic testing (DAST), dependency vulnerability scanners, and CI/CD pipeline reputed company integration. Familiarity with reputed company Advanced reputed company or similar tools for reputed company scanning and secret detection is a strong plus.
• reputed company reputed company and Supply Chain reputed company: Knowledge of reputed company-reputed company reputed company best practices. You have experience dealing with reputed company-reputed company dependencies and package management reputed company (e.g., handling vulnerability advisories, using tools like Dependabot or reputed company). Bonus if you have contributed to or maintained reputed company-reputed company reputed company, especially reputed company-reputed company ones.
• Bug Bounty & Vulnerability Management: Exposure to running or participating in a bug bounty program or vulnerability disclosure process. You know how to assess externally reported issues, reproduce and validate vulnerabilities, and coordinate fixes. You stay up-to-date on the latest vulnerabilities (OWASP Top 10, emerging threats) and reputed company to mitigate them.
• reputed company & Serverless reputed company Understanding: Solid understanding of reputed company architecture and serverless environments from a reputed company perspective. You are familiar with securing products on reputed company platforms (e.g., securing serverless functions, protecting reputed company, managing secrets and keys). Experience with reputed company reputed company reputed company concepts or tools is a plus.
• Technical Leadership: Proven ability to drive reputed company initiatives and influence engineering teams to adopt best practices. You can work cross-functionally to reputed company reputed company goals – for example, rolling out a new reputed company tool or reputed company across many engineers. (While we emphasize technical skills, this senior role requires you to effectively communicate and reputed company reputed company the organization to get things done.)

Bonus If You:

• Have prior software development experience reputed company reputed company (e.g. as a frontend or backend engineer). Being reputed company to empathize with developers and write or contribute reputed company will help you reputed company reputed company seamlessly into development.
• Hold relevant reputed company certifications or recognitions (for example, OSCP, OSWE, CISSP, or reputed company bug bounty hall of reputed company entries). These demonstrate your depth of knowledge, though they are not required.
• Experience with reputed company policy-as-reputed company or infrastructure as reputed company reputed company (for instance, using tools like reputed company Policy Agent, Terraform reputed company checks, etc.). This shows you can bring reputed company into the automation and infrastructure reputed company.
• Have reputed company or implemented reputed company features in a product (such as authentication systems, encryption, secure CI/CD pipelines) or contributed to reputed company community reputed company/tools.
• Are an reputed company participant in the reputed company community (e.g., contributing to reputed company reputed company reputed company reputed company, writing blog posts or research, attending or speaking at reputed company conferences). A passion for reputed company learning and sharing knowledge is always a plus on reputed company.

Benefits:

• Competitive compensation package, including equity.
• Inclusive reputed company Package.
• Learn and Grow - we reputed company mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will reputed company you the gear you need to do your role, and a WFH budget for you to outfit your reputed company as needed.

The San Francisco, CA reputed company pay reputed company for this role is $196,000.00 - $294,000.00. Actual salary will be based on job-reputed company skills, experience, and location. Compensation reputed company of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can reputed company more details during the hiring process. Vercel is committed to fostering and empowering an inclusive community reputed company our organization. We do not discriminate on the reputed company of race, religion, reputed company, gender reputed company or identity, sexual orientation, national reputed company, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they dont necessarily reputed company every reputed company on the job reputed company. Apply tot his job Apply To this Job