3 months ago
Base Salary
$208k - $312k/yr
Responsibilities
- Design and implement scalable security controls across the cloud-native platform.
- Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
- Build secure-by-default infrastructure and code CI/CD pipelines.
- Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
- Monitor cloud security trends and adopt technologies that improve platform resilience.
- Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
- Improve platform-level monitoring, detection, and incident response.
- Build, deploy, and maintain security tooling.
Requirements
- 8+ years of experience in infrastructure or platform security roles.
- Deep understanding of secure cloud infrastructure using AWS or GCP, identity and access management, and system hardening.
- Proficiency with Terraform, CDK, Kubernetes, and CI/CD security.
- Ability to balance engineering realities with principled security practices.
- Proven track record of shipping secure, resilient systems at scale.
- Bonus qualifications include security automation pipeline experience, open-source security contributions, GCP Security Engineer or AWS certifications, CISSP, OSCP, or a bachelor's or master's degree in Cybersecurity or a related discipline.
Benefits
- Hybrid or fully remote within the United States; employees near the San Francisco or New York offices attend in-office anchor days Monday, Tuesday, and Friday.
- Healthcare package.
- Mentorship and support for attending professional events.
- Flexible time off.
- Company-provided equipment and a work-from-home budget.
Tech Stack
Categories
About Vercel
Vercel builds a frontend cloud platform for developing, previewing, and deploying web applications, with strong support for React and Next.js. It sells usage-based and enterprise plans to developers and companies, and it stewards the open-source Next.js framework alongside tools like the AI SDK. Founded in 2015 and headquartered in San Francisco, the privately held company focuses on speeding up modern web development and delivery.