1 month ago
Base Salary
$208k - $312k/yr
Responsibilities
- Proactively identify and fix vulnerabilities across v0.
- Design and implement sandboxing, isolation, permission boundaries, abuse detection, and safe defaults for generated applications.
- Review all new v0 features, generated-app patterns, integrations, and launches from a security perspective.
- Own the v0 relationship with HackerOne researchers by triaging reports, validating findings, and driving remediation.
- Create and continuously refine the v0 threat model covering code generation, execution, deployment, agent actions, user intent, prompt injection, and tool-use abuse.
- Harden agent-generated code execution using Vercel’s sandbox and serverless runtimes.
- Build libraries, patterns, and checks that prevent recurring authentication, SSRF, and injection vulnerabilities.
- Partner with central Product Security on threat models, incident learnings, and SDLC tooling.
- Respond to v0-specific security reports and incidents as the first responder and technical owner.
- Build and ship normal v0 product features while setting the team’s security bar.
Requirements
- 5+ years building and shipping production web applications.
- Strong full-stack fundamentals in TypeScript, React, and Node.
- Practical understanding of authentication and authorization design, sandboxing and isolation, injection vulnerabilities, and AI-agent attack surfaces.
- Ability to independently build features, fix vulnerabilities, review launches, and operate at the Senior/IC4 level.
- Ability to work effectively in an ambiguous, fast-moving product environment and make security tradeoff decisions.
- Preferred: experience with sandboxing, container isolation, or multi-tenant systems.
- Preferred: prompt injection, jailbreak, or LLM application security research experience.
- Preferred: experience shipping a coding agent, developer tool, or code-generation product.
- Preferred: OSCP or OSWE certification, bug bounty experience, or CTF history.
- Preferred: experience writing blog posts, giving conference talks, or publishing research writeups.
Benefits
- Competitive compensation package including equity.
- Inclusive healthcare package.
- Mentorship and support for attending professional events.
- Flexible time off.
- Company-provided equipment and a work-from-home budget.
- San Francisco, California role with compensation potentially adjusted for employee location.
Tech Stack
Categories
About Vercel
Vercel is the platform where humans and AI agents build, ship, and scale software together. Trusted by OpenAI, Meta, Ramp, and Supreme, we free the world to ship what's next.