# Product Security Engineer

Hiring organization: [Vercel](https://career.thegoodapps.co/organizations/vercel)

Canonical page: https://career.thegoodapps.co/jobs/871ce53a-51c9-41af-9f60-543318b4e0d3

Listed on Vercel's own careers site. Applications go to them directly.

- Location: Berlin, NY
- Salary: 208000 – 312000 USD per year

## Summary

This role focuses on building automated systems to triage and validate security vulnerabilities at scale using AI agents and LLM-based reasoning, rather than manual review processes. It's ideal for a software engineer transitioning into security or a security engineer with strong development skills who wants to rethink how product security operates in a high-volume environment.

_Our summary, not Vercel's wording._

## Skills named

JavaScript, Next.js, Node.js, React, TypeScript

## Required

- Strong software engineering background
- Understand vulnerability triage and validation
- Web tech stack proficiency with JavaScript/TypeScript and Node.js
- Systems thinking and root cause analysis
- Ability to define new security practices

## Nice to have

- Built or contributed to security automation across an engineering org
- Experience running or triaging a bug bounty program
- Experience securing multi-tenant platforms
- Built systems that auto-generate or auto-propose code fixes
- Thought about security testing as a product capability
- Relevant security certifications (OSCP, OSWE, CISSP, or bug bounty recognition)

Apply on Vercel's site: https://job-boards.greenhouse.io/vercel/jobs/6102343004