Security Engineer, Cloud

Vercel, the team behind Next.js, v0, and AI SDK, is looking for a Security Engineer to join its Cloud Security Engineering team. You will help strengthen the security of the platform by building and improving the controls that protect its infrastructure, making security a core part of how systems are built, deployed, and scaled while the company grows securely and confidently. The role reports to the Security Operations Manager.

Responsibilities

• Design and implement scalable security controls across a cloud-native platform.
• Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
• Build secure-by-default infrastructure and code CI/CD pipelines.
• Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
• Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
• Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
• Drive improvements in monitoring, detection, and incident response at the platform level.
• Build, deploy, and maintain relevant security tooling.

Qualifications

• 8+ years of experience in infrastructure or platform security roles.
• Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
• Proficiency with tools like Terraform, CDK, and Kubernetes, plus CI/CD security.
• Skilled at balancing engineering realities with principled security practices.
• Proven track record of shipping secure, resilient systems at scale.
• Bonus: experience building or scaling security automation pipelines, contributions to open-source security projects, or certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP.