Job brief: Product Security Engineer

What JoRoute checked · Checked by JoRoute

• Listed on Vercel's own job board. JoRoute does not take listings from job ads or recruiters.
• First seen by JoRoute 2026-11-04 (3 days ago); last confirmed on the board 2026-11-07.
• The apply link opens job-boards.greenhouse.io, the address Vercel's board gives for this job.
• No other listing with this title and place on this board in the last 90 days.
• No layoff notices (WARN) under this name in the state files JoRoute reads.

What the listing says · Employer's own words, not checked

• Pay: Not published
• Job type: Not stated
• Where: Hybrid - San Francisco, New York City · Office - New York City · Office - San Francisco
• Posted: 2026-06-26 · over 60 days ago

What the job asks · Employer's own words, not checked

Level: Senior. The posting asks for 5+ years of experience.

Must have

• 5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools

Conditions

• This is a hybrid role based in San Francisco or New York City, with three days a week in the office.

Main duties

• Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match
• Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures
• Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with hum…
• Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage

Lines copied from the posting, not rewritten. "Preferred" or "nice to have" items are not listed as must-haves.

How it compares · Compared by JoRoute from listings

• Typical listed pay for engineer jobs across the U.S.: $140k a year (3,401 listings, 147 employers). This listing does not publish pay to compare.
• Across Vercel's 71 open listings, 54% of those with a posting date were first posted more than 60 days ago. How Vercel hires

What nobody outside the employer knows · Not known

• Whether the role is already filled or on hold: employers often leave listings up.
• How many people applied, and who reads the applications.
• The pay an offer would carry.

Ask before you apply

1. What is the pay range for this role?
2. Is this role still open, and when do you hope to fill it?
3. Which of the listed places is this role based in?
4. What are the interview steps, and when should I expect to hear back?

Share this brief

Send it to someone whose opinion you trust. They can open it without an account, and nothing about you is in the link.

Email itText it

To keep a copy, use your browser's Print or Share button.

Next steps

Apply on the employer's page Full listingDoes my CV fit?Practise the interviewShould I apply?

Got a message about this job asking for money or documents? Check the message first.

Keep looking

• All 71 open Vercel jobs, and how Vercel hires.
• Saw a job somewhere else? Check if the employer still lists it.
• Search every job JoRoute reads from employers' own job boards. No account needed.