Vercel
Product Security Engineer
$208K–$312K
Hybrid - San Francisco, New York City +2 · Full-time · Posted Jun 25, 2026
- Location
- Hybrid - San Francisco, New York City
New York, New York, United States
San Francisco, California, United States - Experience
- 5+ years of software engineering or security engineering experience.
About the job
Build automated systems that validate externally reported security vulnerabilities, trace them to root causes, and propose or open fixes.
What you'll do
- Develop high-volume vulnerability triage and validation systems, including LLM- and agent-based analysis.
- Trace validated findings to root causes and propose or open fixes with human review gates; extend tooling into customer security testing.
- Own the bug bounty program, including its scope, policy, researcher engagement, and feeding resolved reports into automated triage.
What they ask for
- 5+ years of software engineering or security engineering experience building and shipping production systems or internal tools.
- Production JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React.
- Experience building with LLM or agent-based tooling.
- Experience reproducing and assessing externally reported vulnerabilities, including judging severity.
Nice to have
- Built security automation used across an engineering organization.
- Built systems that auto-generate or propose code fixes, or tested or secured multi-tenant platforms running customer-built applications on shared infrastructure.
Pay
$208,000.00 - $312,000.00 USD base salary
Tools
JavaScript/TypeScript, Node.js, Next.js, React, LLM, agent-based tooling
AI focus
Build LLM- and agent-based tooling to validate security findings, trace root causes, and propose or open fixes.
Model-written summary · the original posting is authoritative