Security Engineer, Detection Response

<div class="content-intro"><h2>About Vercel:</h2> <p><span data-sheets-root="1">Vercel is the agentic infrastructure company. We free people and agents to ship what’s next.</span></p> <p><span data-sheets-root="1">For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we create products that help builders move from idea to production with speed, security, and exceptional developer experience.</span></p> <p><span data-sheets-root="1">Now, software is entering a new era, and the next generation of products will not just be used by people. They will be built, extended, and operated by agents.</span></p> <p><span data-sheets-root="1">We are building the platform for that future, trusted by companies like <strong>OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide</strong>. Whether you’re building our products, supporting our customers, growing our community, or shaping our story, you’ll help define what comes next.</span></p></div><h2>About the Role:</h2> <p>We are looking for a Security Engineer to join our Detection Response team. In this role, you will be responsible for managing Vercel’s internal Corporate Security (CorpSec) posture, monitoring for security anomalies, building additional detections and visibility mechanisms, and ensuring the overall security of our internal systems. You will work closely with various teams to support audits, optimize visibil<span class="discussion-id-198e06b0-59c4-8002-b44b-001c9a9c56d8 suggestion-update notion-enable-hover" data-token-index="5">i</span>ty, and handle security incidents as they arise.</p> <p>If you’re based within a pre-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office anchor days on Monday, Tuesday, and Friday. If you're located beyond that distance, the role is fully remote. For location-specific details, please connect with our recruiting team.</p> <h2>What You Will Do:</h2> <ul> <li>Monitor and respond to security alerts across multiple channels, including managed SOC escalations.</li> <li>Maintain visibility and logging infrastructure, ensuring effective SIEM (Security Information and Event Management) operations.</li> <li>Support security audits for PCI, SOC2, ISO, and other compliance frameworks, gathering evidence and collaborating with Engineering, GRC and the broader Security Division.</li> <li>Proactively enhance security operations by developing and deploying new detections, security tooling and rigorously managing key security partners.</li> <li>Work on security investigations, incidents, and urgent requests as they arise, as wel