Security Engineer Detection Response

We are looking for a Security Engineer to join our Detection Response team. In this role you will be responsible for managing Vercel’s internal Corporate Security (CorpSec) posture monitoring for security anomalies building additional detections and visibility mechanisms and ensuring the overall security of our internal systems. You will work closely with various teams to support audits optimize visibility and handle security incidents as they arise.

If you’re based within a pre-determined commuting distance of one of our offices (SF NY London or Berlin) the role includes in-office anchor days on Monday Tuesday and Friday. If you're located beyond that distance the role is fully remote. For location-specific details please connect with our recruiting team.

• Monitor and respond to security alerts across multiple channels including managed SOC escalations.
• Maintain visibility and logging infrastructure ensuring effective SIEM (Security Information and Event Management) operations.
• Support security audits for PCI SOC2 ISO and other compliance frameworks gathering evidence and collaborating with Engineering GRC and the broader Security Division.
• Proactively enhance security operations by developing and deploying new detections security tooling and rigorously managing key security partners.
• Work on security investigations incidents and urgent requests as they arise as well as contributing to the build-out and continuous improvement of the on-call process to enhance efficiency and effectiveness.
• Continuously act as a guardian to enable the business to navigate risk-based changes.
• Manage and enhance email security endpoint security posture (EDR configuration and management) GitHub administration best practices and internal security tooling to strengthen Vercel's overall security framework

• Extensive experience in security operations including SIEM management security logging and detection engineering.
• Strong knowledge of AWS infrastructure and cloud security best practices.
• Experience with GitHub administration and security controls.
• Proficiency in SQL for data analysis and security investigations.
• Hands-on experience with incident response including detection triage and remediation.
• Strong endpoint management skills across multiple operating systems (Mac Windows Linux).
• Proficiency in at least one scripting language (Python Bash) and one compiled language (Rust Go).
• Familiarity with serverless functions and API security is a plus.

• Have experience working with managed SOC providers and security automation platforms.
• Have worked in high-growth cloud-native environments with a focus on scalability.
• Are comfortable working in a fast-paced environment with shifting priorities.

• Competitive compensation package including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role and a WFH budget for you to outfit your space as needed.

The San Francisco CA base pay range for this role is $208000-$312000. This salary range is an estimate. Actual salary will be based on job-related skills experience and location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.

Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race religion color gender expression or identity sexual orientation national origin citizenship age marital status veteran status disability status or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions even if they don't necessarily check every box on the job description.

What We Do

From solo developers building their first app to large enterprise teams if it needs to be fast reliable and beautifully built it runs on Vercel. Our platform powers millions of deployments a day. We started with a simple belief: the web should be fast for everyone everywhere. That belief became Next.js. Then a platform. Then the infrastructure layer for the AI-native web.We are backed by the amazing team at Accel and CRV and we're headquartered in San Francisco.