Senior Platform Security Engineer

About Vercel:

Vercel gives developers the tools and cloud infrastructure to build, scale, and secure a faster, more personalized web. As the team behind v0, Next.js, and AI SDK, Vercel helps customers like Ramp, Supreme, PayPal, and Under Armour build for the AI-native web.

Our mission is to enable the world to ship the best products. That starts with creating a place where everyone can do their best work. Whether you're building on our platform, supporting our customers, or shaping our story: You can just ship things.

About the role:

We are looking for a Senior Platform Security Engineer to join our Security Engineering team. You’ll lead efforts to harden our platform and ensure that infrastructure security is foundational to how we build and scale. Your work will strengthen the security posture of our core systems while enabling fast, secure growth across the company. You will report to the Head of Security Engineering and can be located remotely.

If you’re based within a pre-determined commuting distance of one of our offices (San Francisco, CA or New York City, NY), the role includes in-office anchor days on Monday, Tuesday, and Friday, even if the role is listed as remote. For location-specific details, please connect with our recruiting team.

What you will do:

• Design and implement scalable security controls across our cloud-native platform.
• Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
• Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
• Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
• Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
• Drive improvements in monitoring, detection, and incident response at the platform level.

About you:

• 7+ years of experience in infrastructure or platform security roles.
• Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
• Proficient with tools like Terraform, Kubernetes, and CI/CD security.
• Skilled at balancing engineering realities with principled security practices.
• Proven track record of shipping secure, resilient systems at scale.

Bonus if you:

• Have built or scaled security automation pipelines.
• Contributed to open-source security projects or tools.
• Hold certifications such as GCP Security Engineer, CISSP, or OSCP.

Benefits:

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $196,000.00 - $294,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location, and the total package includes benefits and equity-based compensation. Your recruiter can share more details during the hiring process.

Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.