{"id":2421,"url":"https://alion.io/job/vercel-product-security-engineer","title":"Product Security Engineer","company":{"id":1110,"name":"Vercel","domain":"vercel.com","url":"https://alion.io/company/vercel","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":73,"open_postings":25,"ghost_share":0,"stale_share":0.84,"repost_share":0.04,"time_to_fill_p50_days":78,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":208000,"max":312000,"currency":"USD","period":"year","gross":null,"usd_annual":312000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"Next.js","optional":false},{"name":"Node JS","optional":false},{"name":"OpenAI","optional":false},{"name":"React.js","optional":false},{"name":"TypeScript","optional":false},{"name":"Vercel","optional":false}],"status":"live","first_seen_at":"2026-06-26T02:18:21Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-18T03:27:05Z","board_verified":true,"closed_at":null,"days_open":114,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":114},"description":"About Vercel:\nVercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.\nNow we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.\nAbout the role:\nWe are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue, and this role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.\nWhat you’ll do:\nBuild the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match\nBuild LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures\nBuild systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates\nOwn the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage\nExtend the tooling into security testing capabilities that customers can use on what they build and deploy\nWhat you need:\n5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools\nWrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React\nBuilt with LLM or agent-based tooling\nReproduced and assessed externally reported vulnerabilities, including judging severity\nBonus if you:\nBuilt security automation used across an engineering org, not just for your own team\nBuilt systems that auto-generate or propose code fixes, not just findings\nTested or secured multi-tenant platforms where customer-built applications run on shared infrastructure\nCompensation & Benefits:\nCompetitive compensation package, including equity.\nInclusive Healthcare Package.\nLearn and Grow - we provide mentorship and send you to events that help you build your network and skills.\nFlexible Time Off.\nWe will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.\nThe San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. \nDisclosures:\nPrivacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.\n Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.","description_format":"text","description_chars":3852,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-06-26T02:18:21Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.555,"p_room":0.44,"age_days":113,"expected_fill_days":78,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":312000,"is_top_pay":true},"html_url":"https://alion.io/job/vercel-product-security-engineer","json_url":"https://alion.io/job/vercel-product-security-engineer.json","meta":{"generated_at":"2026-10-18T04:47:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7160,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1110},"rest":"https://alion.io/mcp/rest/get_company?id=1110"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvercel-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvercel-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvercel-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vercel-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvercel-product-security-engineer"}]}