RefolkCandidates
Open nowEngineeringSecurity

Security Engineer, Detection Response

Vercel · Hybrid - San Francisco, New York City

Location
Hybrid - San Francisco, New York City, London
Workplace
Hybrid
Level
Mid level
Posted
2 months ago

About this role

About Vercel:

Vercel is the agentic infrastructure company. We free people and agents to ship what’s next.

For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we create products that help builders move from idea to production with speed, security, and exceptional developer experience.

Now, software is entering a new era, and the next generation of products will not just be used by people. They will be built, extended, and operated by agents.

We are building the platform for that future, trusted by companies like OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. Whether you’re building our products, supporting our customers, growing our community, or shaping our story, you’ll help define what comes next.

About the Role:

We are looking for a Security Engineer to join our Detection Response team. In this role, you will be responsible for managing Vercel’s internal Corporate Security (CorpSec) posture, monitoring for security anomalies, building additional detections and visibility mechanisms, and ensuring the overall security of our internal systems. You will work closely with various teams to support audits, optimize visibility, and handle security incidents as they arise.

If you’re based within a pre-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office anchor days on Monday, Tuesday, and Friday. If you're located beyond that distance, the role is fully remote. For location-specific details, please connect with our recruiting team.

What You Will Do:

  • Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
  • Maintain visibility and logging infrastructure, ensuring effective SIEM (Security Information and Event Management) operations.
  • Support security audits for PCI, SOC2, ISO, and other compliance frameworks, gathering evidence and collaborating with Engineering, GRC and the broader Security Division.
  • Proactively enhance security operations by developing and deploying new detections, security tooling and rigorously managing key security partners.
  • Work on security investigations, incidents, and urgent requests as they arise, as well as contributing to the build-out and continuous improvement of the on-call process to enhance efficiency and effectiveness.
  • Continuously act as a guardian to enable the business to navigate risk-based changes.
  • Manage and enhance email security, endpoint security posture (EDR, configuration, and management), GitHub administration best practices, and internal security tooling to strengthen Vercel's overall security framework

About You:

  • Extensive experience in security operations, including SIEM management, security logging, and detection engineering.
  • Strong knowledge of AWS infrastructure and cloud security best practices.
  • Experience with GitHub administration and security controls.
  • Proficiency in SQL for data analysis and security investigations.
  • Hands-on experience with incident response, including detection, triage, and remediation.
  • Strong endpoint management skills across multiple operating systems (Mac, Windows, Linux).
  • Proficiency in at least one scripting language (Python, Bash) and one compiled language (Rust, Go).
  • Familiarity with serverless functions and API security is a plus.

Bonus If You:

  • Have experience working with managed SOC providers and security automation platforms.
  • Have worked in high-growth, cloud-native environments with a focus on scalability.
  • Are comfortable working in a fast-paced environment with shifting priorities.

Benefits:

  • Competitive compensation package, including equity.
  • Inclusive Healthcare Package.
  • Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
  • Flexible Time Off.
  • We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $208,000-$312,000. This salary range is an estimate. Actual salary will be based on job-related skills, experience, and location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.

Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

As published by Vercel. Applications are handled on their site.

Skills this posting mentions

ScriptingCloud SecuritySecurity Operations

About Vercel

Vercel combines the best developer experience with an obsessive focus on end-user performance. Our platform enables frontend teams to do their best work.

All 84 openings at Vercel

One click, then it is written

Apply to Vercel with a resume written for this role.

Queue Security Engineer, Detection Response and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Vercel’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Vercel

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board Vercel publishes. Refolk is not the employer and does not handle their hiring. Applications go to Vercel directly.