About this role
About the Role Join Vercel's Detection Response team as a Security Engineer to own internal CorpSec posture, monitor for security anomalies, and build detections and visibility. You will work closely with Engineering, GRC, and the broader Security Division to support audits, incident response, and risk-based changes. The role offers in-office anchor days for near-office locations (SF, NY, London, Berlin) or fully remote work if outside commuting distance.
What You'll Do
- Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
- Maintain visibility and logging infrastructure; ensure effective SIEM operations.
- Support security audits for PCI, SOC2, ISO, and other frameworks; gather evidence and collaborate with Engineering, GRC and the Security Division.
- Proactively enhance security operations by developing and deploying new detections, security tooling, and rigorously managing key security partners.
- Work on security investigations, incidents, and urgent requests as they arise, and contribute to the build-out and continuous improvement of the on-call process.
- Continuously act as a guardian to enable the business to navigate risk-based changes.
- Manage and enhance email security, endpoint security posture (EDR, configuration, and management), GitHub administration best practices, and internal security tooling to strengthen Vercel's overall security framework.
What We're Looking For
- Extensive experience in security operations, including SIEM management, security logging, and detection engineering.
- Strong knowledge of AWS infrastructure and cloud security best practices.
- Experience with GitHub administration and security controls.
- Proficiency in SQL for data analysis and security investigations.
- Hands-on experience with incident response, including detection, triage, and remediation.
- Strong endpoint management skills across Mac, Windows, Linux.
- Proficiency in at least one scripting language (Python, Bash) and one compiled language (Rust, Go).
- Familiarity with serverless functions and API security is a plus.
Nice to Have
- Experience working with managed SOC providers and security automation platforms.
- Experience in high-growth, cloud-native environments with a focus on scalability.
- Comfort working in a fast-paced environment with shifting priorities.
Compensation & Benefits
- Salary: The San Francisco base pay range for this role is $208,000-$312,000 USD per year. This is a location-based range; actual pay will be based on skills, experience, and location. The total compensation includes benefits and equity-based compensation.
- Benefits include inclusive healthcare, learn and grow opportunities (mentorship and events), Flexible Time Off, a WFH gear budget, and equipment to outfit your space.
- Equity-based compensation as part of total package.