Security Engineer, Cloud

Stack

Responsibilities

• ▹Design and implement scalable security controls across the cloud-native platform
• ▹Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation
• ▹Build secure-by-default infrastructure and CI/CD pipelines
• ▹Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows
• ▹Stay ahead of cloud security trends and adopt new technologies to enhance platform resilience
• ▹Conduct threat modeling, risk analysis, and mitigation planning for critical systems
• ▹Drive improvements in monitoring, detection, and incident response at the platform level
• ▹Build, deploy, and maintain relevant security tooling

Requirements

• ▹8+ years of experience in infrastructure or platform security roles
• ▹Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening
• ▹Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security
• ▹Skilled at balancing engineering realities with principled security practices
• ▹Proven track record of shipping secure, resilient systems at scale

Nice to have

• ▹Built or scaled security automation pipelines
• ▹Contributed to open-source security projects or tools
• ▹Certifications such as GCP Security Engineer, AWS, CISSP, or OSCP
• ▹Bachelor's or master's degree in Cybersecurity or a similar discipline

Soft skills

What we offer

• ▹Competitive compensation package, including equity
• ▹Inclusive healthcare package
• ▹Mentorship and events to build skills and network
• ▹Flexible time off
• ▹WFH gear and budget

About the company

Vercel is the agentic infrastructure company, the team behind Next.js, v0, and the AI SDK, trusted by companies like OpenAI, PayPal, Ramp, and Supreme, and millions of developers worldwide.