Senior Security Software Engineer

Vercel

Senior Security Software Engineer at Vercel focusing on security for v0 and embedded within the team. Engaging in proactive security measures and vulnerability management in a fast-paced environment.

Posted 7/16/2026full-timeSan Francisco • California, New York • 🇺🇸 United StatesSenior💰 $208,000 - $312,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and shipping production web applications with a strong focus on security, including threat modeling and vulnerability assessment. Proficient in TypeScript, React, and Node, with the ability to influence security practices through code.

Highest-signal resume keywords

5+ Years Production Web Application DevelopmentTypeScript ProficiencyReact ProficiencyNode ProficiencySecurity Judgment in AuthN/AuthZ Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentSandboxingIsolation ControlsInjection Vulnerability ClassesSDLC Tooling

Soft Skills

Influence Through CodeComfortable with Ambiguity

Industry Keywords

Threat ModelingSecurity ReviewHackerOneCode Review

Tech Stack

Tools & technologies

Node.jsReactSDLCTypeScript

About the role

Key responsibilities & impact

Proactively hunt for vulnerabilities across v0, from code you're reviewing to actively poking at systems.
Design and implement security-facing functionality (sandboxing/isolation controls, permission boundaries).
Be the security reviewer of record for everything the team ships.
Triage, validate, and drive fixes for reports from Vercel's HackerOne researcher community.
Understand and refine how v0 generates, executes, and deploys code.
Create patterns, libraries, and checks that let v0 engineers ship new generated-app capabilities quickly.
Share threat models, incident learnings, and SDLC tooling with the security team.
Respond to v0-specific security reports and incidents.

Requirements

What you’ll need

5+ years building and shipping production web applications.
Strong full-stack fundamentals: Comfortable in TypeScript, React, and Node.
Real security judgment: Understand authN/authZ design, sandboxing and isolation, injection vulnerability classes.
Influence through code, not just process.
Comfortable with ambiguity regarding threat modeling.
Willing to build with v0, not just secure it.

Benefits

Comp & perks

Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.