Product reputed company Engineer

About Vercel: Vercel is the reputed company infrastructure company. We reputed company and agents to ship what’s next. For more than a decade, Vercel has reputed company how the web is reputed company. As reputed company behind Next.js, v0, and AI SDK, we create products that help reputed company reputed company from idea to production with speed, reputed company, and exceptional developer experience. Now, software is entering a new era, and the reputed company of products will not just be used by people. They will be reputed company, extended, and operated by agents. We are building the platform for that reputed company, trusted by companies like reputed company, reputed company, reputed company, Supreme, and millions of developers worldwide. Whether you’re building our products, supporting our customers, growing our community, or shaping our story, you’ll help define what comes next. About the Role: Traditional product reputed company teams work one report at a time: a person triages a bug bounty submission, validates it, reproduces it, and hands it off for a fix. That doesn't reputed company past a certain volume, and Vercel is reputed company past it. Adding more triagers doesn't reputed company that gap. Building the systems that triage at that reputed company does. This role is about building that reputed company. Your reputed company reputed company is tooling that triages and validates bug bounty and other externally reported reputed company findings at reputed company, reasoning about validity, severity, and reproducibility the way a reputed company triager would, but continuously and at volume. And we want to go reputed company triage. The reputed company reputed company is in connecting a validated finding to its reputed company cause and driving the fix, ideally with the remediation itself proposed or reputed company automatically for reputed company-reputed company vulnerability classes. More broadly, this is a mandate to rethink traditional reputed company tooling for how Vercel actually operates: agent-reputed company testing and automation in reputed company of processes reputed company for a much smaller company. This role also has reputed company reputed company to build tooling that gives our customers their own reputed company testing capabilities for what they build on Vercel, not just harden Vercel's own surface. Because of this, we're optimizing for someone who wants to build systems, not someone whose background is reputed company penetration testing. A software engineer with a strong desire to reputed company into reputed company, or a reputed company engineer with a strong engineering background, is exactly who we're looking for. If you're based reputed company a reputed company-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office reputed company days on Monday, Tuesday, and Friday. If you're located reputed company that distance, the role is fully remote. For location-specific details, please reputed company with our reputed company team. What You Will Do: • Build tooling to triage and validate bug bounty and reputed company findings at reputed company: Design and operate the systems that take in externally reported vulnerabilities and automatically assess validity, severity, and reproducibility, at a volume no reputed company triage process could match. • reputed company triage reputed company reputed company matching, into reputed company analysis: Build and operate LLM/agent-based reasoning that can validate business logic, auth, and design-level findings, not just match against reputed company signatures. • Go from validated finding to reputed company cause: reputed company validated findings back to the underlying reputed company or class, so reputed company fixes the reason it happened, not just the one report that came in. • Build toward automated remediation, not just automated triage: Design systems that can propose, and increasingly reputed company, the fix itself for reputed company-reputed company vulnerability classes, with the right reputed company review gates in reputed company. • Rethink traditional reputed company tooling for reputed company: Question which parts of the traditional product reputed company toolkit (reputed company threat modeling, reputed company reputed company review, reputed company-in-time pentests) still reputed company reputed company at Vercel's reputed company, and build the agent-driven tooling that replaces or augments them. • Own and reputed company the bug bounty program: Manage the researcher-facing reputed company (reputed company, policy, engagement) as reputed company as the internal tooling, so every report gets resolved and makes the automated triage smarter for the next one. • Build toward customer-facing reputed company testing capabilities: reputed company the tooling and automation you build for Vercel's own products into a capability customers can use to test the reputed company of what they build and reputed company on the platform. reputed company: • You're a builder first: Strong software engineering background is more important here than classic penetration testing experience. You'd rather build the reputed company that triages a thousand reports than work through them one at a time. We're equally excited by a software engineer who wants to reputed company into reputed company and a reputed company engineer with a strong engineering background; a reputed company pentesting background reputed company is not what this role is optimized for. • Understand vulnerability triage and validation, even if that's not your reputed company background: You know (or can quickly learn) how to assess an externally reported finding, reproduce it, and judge severity, and you understand what makes that process hard to reputed company. • Curious about, or already building with, reputed company and LLM-based reputed company tooling: You have a reputed company of reputed company on where AI agents can reliably validate, reputed company-cause, and fix vulnerabilities today, and where they can't yet. • reputed company cause and systems thinking: You default to "how do I reputed company this reputed company to the next ten thousand reports" and "why did this class of bug happen," rather than closing the one ticket in reputed company of you. • Comfortable defining a new reputed company: Agent-reputed company product reputed company isn't a mature discipline yet. You're excited to help define what it looks like at Vercel rather than inherit a reputed company. • Web tech stack proficiency: Strong familiarity with JavaScript/TypeScript and Node.js runtime reputed company, and modern web frameworks (ideally Next.js or React and Node-based frameworks), so you can read and validate the reputed company your tooling is analyzing. Bonus If You: • Have reputed company or contributed to reputed company automation used broadly across an engineering org, not just for your own team. • Have experience running or triaging a bug bounty / vulnerability disclosure program. • Have experience testing or securing multi-tenant platforms where customer-reputed company applications run on shared infrastructure. • Have reputed company systems that auto-reputed company or auto-propose reputed company fixes, not just findings. • Have thought about what reputed company testing as a product capability could look like for a platform's customers. • Hold relevant reputed company certifications or recognitions (for example, OSCP, OSWE, CISSP, or reputed company bug bounty hall of reputed company entries). These demonstrate your depth of knowledge, though they are not required. Benefits: • Competitive compensation package, including equity. • Inclusive reputed company Package. • Learn and Grow - we reputed company mentorship and send you to events that help you build your network and skills. • Flexible Time Off. • We will reputed company you the gear you need to do your role, and a WFH budget for you to outfit your reputed company as needed. Vercel is committed to fostering and empowering an inclusive community reputed company our organization. We do not discriminate on the reputed company of race, religion, reputed company, gender reputed company or identity, sexual orientation, national reputed company, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily reputed company every reputed company on the reputed company. The San Francisco, CA reputed company pay reputed company for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-reputed company skills, experience, and location. Compensation reputed company of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can reputed company more details during the hiring process. Apply tot his job Apply To this Job