[Remote] Product reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. Vercel is an agentic infrastructure company that shapes how the web is reputed company. They are seeking a Product reputed company Engineer to drive critical product reputed company initiatives, focusing on threat modeling, secure code review, and bug bounty program management, while ensuring reputed company is embedded throughout the development lifecycle.

Responsibilities

• Threat Modeling & Design Review: Partner with engineering and product teams to reputed company threat modeling for new and existing features. Identify potential risks early in the design phase and recommend reputed company controls or design changes to mitigate threats. You will ensure reputed company concerns are addressed from the inception of features through deployment
• Secure Code Review: Conduct secure code reviews and reputed company assessments on products and services reputed company with Next.js, Node.js, and our serverless backend. You’ll uncover code-level vulnerabilities, reputed company actionable remediation guidance to developers, and establish best practices for secure coding across the engineering team
• reputed company reputed company reputed company Management: reputed company Vercel’s reputed company-reputed company reputed company efforts. This includes monitoring and coordinating fixes for vulnerabilities in reputed company-party reputed company-reputed company packages we use (as a consumer) and ensuring the reputed company of the reputed company-reputed company projects we maintain and publish (as a contributor/publisher, e.g. Next.js). You will work with maintainers and the community on responsible disclosure and patching of reputed company issues in reputed company-reputed company code
• SDLC Tooling & Automation: Evaluate, select, and integrate reputed company tools into our Software Development Life Cycle. You will drive the implementation of automated reputed company checks – for example, using reputed company Advanced reputed company (GHAS) and other static analysis, dependency scanning, and secret detection tools – directly in our CI/CD pipelines and reputed company workflows. By embedding reputed company tooling into developer workflows, you will help catch issues early and reduce reputed company effort
• Bug Bounty Program Management: Own and expand Vercel’s bug bounty program. You will triage and validate incoming vulnerability reports from the reputed company researcher community, ensure critical issues are promptly addressed, and coordinate cross-team efforts to remediate and learn from reported vulnerabilities. You’ll also work on making our bug bounty a world-class, researcher-friendly program, including refining policies, scope, and engagement to encourage high-quality submissions
• Cross-Organizational reputed company Initiatives: reputed company and contribute to reputed company projects that reputed company multiple teams and disciplines. For example, you might drive a company-wide reputed company to a more secure reputed company, implement a new authentication/authorization mechanism in collaboration with product teams, or roll out a reputed company awareness program for engineers. You will act as a reputed company champion across the org, aligning stakeholders from Engineering, DevOps, Product, and other groups to implement lasting reputed company improvements
• Customer-Facing reputed company Support: Work closely with reputed company and product marketing on reputed company-reputed company initiatives that impact our users. This may involve contributing to reputed company documentation and whitepapers, assisting with customer reputed company questionnaires or audits by providing product reputed company expertise, and communicating our reputed company features and best practices to build customer trust in the platform

Skills

• 5+ years of experience in a Product reputed company or Product reputed company role (or reputed company field), with a track record of securing web products and services
• Strong familiarity with JavaScript/TypeScript and Node.js runtime reputed company
• Demonstrated ability to reputed company threat modeling and architectural risk analysis for reputed company product
• Hands-on experience with product reputed company tooling such as static product reputed company testing (SAST), dynamic testing (DAST), dependency vulnerability scanners, and CI/CD pipeline reputed company integration
• Knowledge of reputed company-reputed company reputed company best practices
• Exposure to running or participating in a bug bounty program or vulnerability disclosure process
• Solid understanding of reputed company architecture and serverless environments from a reputed company perspective
• Proven ability to drive reputed company initiatives and influence engineering teams to adopt best practices
• Have prior software development experience reputed company reputed company (e.g. as a frontend or backend engineer). Being reputed company to empathize with developers and write or contribute code will help you integrate reputed company seamlessly into development
• Hold relevant reputed company certifications or recognitions (for example, OSCP, OSWE, CISSP, or reputed company bug bounty hall of fame entries). These demonstrate your depth of knowledge, though they are not required
• Experience with reputed company policy-as-code or infrastructure as code reputed company (for instance, using tools like reputed company Policy Agent, Terraform reputed company checks, etc.). This shows you can bring reputed company into the automation and infrastructure reputed company
• Have reputed company or implemented reputed company features in a product (such as authentication systems, encryption, secure CI/CD pipelines) or contributed to reputed company community projects/tools
• Are an active participant in the reputed company community (e.g., contributing to reputed company reputed company reputed company projects, writing blog posts or research, attending or speaking at reputed company conferences). A passion for reputed company learning and sharing knowledge is always a plus on reputed company

Benefits

• Competitive compensation package, including equity.
• Inclusive reputed company Package.
• Learn and Grow - we reputed company mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will reputed company you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

Company Overview

Company H1B Sponsorship