Staff Cloud Security Engineer

About Vercel:

Vercel gives developers the tools and cloud infrastructure to build, scale, and secure a faster, more personalized web. As the team behind v0, Next.js, and AI SDK, Vercel helps customers like Ramp, Supreme, PayPal, and Under Armour build for the AI-native web.

Our mission is to enable the world to ship the best products. That starts with creating a place where everyone can do their best work. Whether you're building on our platform, supporting our customers, or shaping our story: You can just ship things.

About the role:

We are looking for a Senior Cloud Security Engineer to join our Security Engineering team. You’ll lead hands on efforts to harden our platform and ensure that infrastructure security is foundational to how we build and scale. Your work will strengthen the security posture of our core systems while enabling fast, secure growth across the company. You will report to the Security Operations Manager and can be located remotely.

What you will do:

• Design and implement scalable security controls across our cloud-native platform.
• Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
• Build secure by default infrastructure and code CI/CD pipelines.
• Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
• Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
• Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
• Drive improvements in monitoring, detection, and incident response at the platform level.
• Build, deploy and maintain relevant tooling.

About you:

• 8+ years of experience in infrastructure or platform security roles.
• Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
• Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security.
• Skilled at balancing engineering realities with principled security practices.
• Proven track record of shipping secure, resilient systems at scale.

Bonus if you:

• Have built or scaled security automation pipelines.
• Contributed to open-source security projects or tools.
• Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP.
• Hold a bachelors or masters degree in Cybersecurity or similar disciplines.

Benefits:

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $196,000.00 - $336,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.