Position Details

Type Full-Time

Experience senior

Exp. Years 5+ years

Education Not specified

Category Cybersecurity

About this role

Vercel is seeking a Senior Product Security Engineer to lead security initiatives, focusing on threat modeling, open-source security, and secure development practices. The role involves collaborating with engineering teams to embed security into the product lifecycle.

Key Responsibilities

Perform threat modeling
Conduct secure code reviews
Oversee open-source security
Manage vulnerability assessments
Lead security initiatives

Technical Overview

This role involves working with Next.js, Node.js, and serverless architectures to identify vulnerabilities, review code, and manage open-source security risks, ensuring platform integrity.

Ideal Candidate

The ideal candidate is a senior cybersecurity engineer with 5+ years of experience in threat modeling, secure code review, and open-source security. They are proactive, detail-oriented, and capable of leading security initiatives across products and platforms.

Must-Have Skills

Threat modelingSecure code reviewOpen-source securitySecurity architectureVulnerability management

Nice-to-Have Skills

Open-source ecosystem knowledgeSecurity toolingBug bounty programsSecurity incident response

Tools & Platforms

Next.jsNode.jsServerless Architecture

Required Skills

Threat ModelingSecure Code ReviewOpen Source SecurityVulnerability ManagementSecurity Architecture

Hard Skills

Threat ModelingSecure Code ReviewOpen Source SecurityVulnerability ManagementSecurity ArchitectureProduct Security

Soft Skills

LeadershipCross-team CollaborationProblem-solvingCommunicationSecurity Awareness

Industry & Role

Industry SaaS

Job Function Product security and vulnerability management

Role Subtype Security Engineer

Tech Domains Next.js, Node.js, Serverless Architecture

Keywords for Your Resume

Product Security EngineerThreat ModelingSecure Code ReviewOpen Source SecurityVulnerability ManagementSecurity ArchitectureBug BountyOpen-sourceSecurity ProgramSecurity InitiativesThreat AssessmentSecurity Best PracticesSecurity EngineerSecurity TeamSecurity VulnerabilitiesSecurity TestingSecurity AutomationSecurity ToolsSecurity Lifecycle

Deal Breakers

Lack of experience with threat modeling or secure code review, No background in open-source security, Unwilling to work remotely, No experience with product security

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile