Dein persönlicher KI-Karriere-Agent
Automated triage of bug bounty findings using LLM-based reasoning for an agentic infrastructure platform. Strong software engineering background and understanding of vulnerability validation required. Equity and flexible time off.
Deine Match-Analyse
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Strong software engineering background
- Preference for building scalable systems over manual triage
- Understanding of vulnerability triage and validation
- Ability to assess, reproduce, and judge vulnerability severity
- Interest in agentic and LLM-based security tooling
- Point of view on AI agents for vulnerability validation, root-cause, and fixing
- Root cause and systems thinking
- Focus on scaling solutions and understanding bug classes
- Comfort defining new security practices
- Web tech stack proficiency
- Familiarity with JavaScript/TypeScript
- Familiarity with Node.js runtime security
- Familiarity with modern web frameworks (Next.js or React, Node-based)
- Experience building broad security automation
- Experience running or triaging bug bounty programs
- Experience testing or securing multi-tenant platforms
- Experience building auto-generating or auto-proposing code fixes
- Thought about security testing as a product capability
- Relevant security certifications or recognitions (e.g., OSCP, OSWE, CISSP)
Aufgaben
- Design and operate systems for automated triage of bug bounty and external findings
- Assess validity, severity, and reproducibility of security vulnerabilities at scale
- Build LLM/agent-based reasoning for validating business logic, auth, and design-level findings
- Trace validated findings to their root causes
- Propose and automate fixes for well-understood vulnerability classes
- Rethink traditional security tooling for Vercel's scale
- Question and replace manual security processes with agent-driven tooling
- Manage the bug bounty program, including scope, policy, and researcher engagement
- Ensure every bug report is resolved and improves automated triage
- Extend security testing capabilities to Vercel customers
- Build customer-facing tools for testing the security of deployed applications
Berufserfahrung
Ausbildung
Sprachen
Tools & Technologien
Benefits
- Equity
- Inclusive Healthcare Package
- Mentorship
- Event attendance
- Flexible Time Off
- Work gear
- WFH budget
- Company bonus eligibility
- Variable pay program eligibility
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Vercel erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei VercelÜber das Unternehmen
Vercel gives developers the tools and cloud infrastructure to build, scale, and secure a faster, more personalized web.
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Noch nicht perfekt?
- VercelSenior Security Software Engineer, v0(m/w/x)Vollzeitmit HomeofficeSeniorBerlinab USD 208.000 - 312.000 / Jahr
- VercelSecurity Software Engineer, Open Source Frameworks(m/w/x)Vollzeitmit HomeofficeBerufserfahrenBerlinab USD 208.000 - 312.000 / Jahr
- commercetoolsPrincipal Engineer, Product Security(m/w/x)Vollzeitmit HomeofficeSeniorMünchen, Berlin
- StaffbaseSenior Product Security Engineer(m/w/x)Vollzeitmit HomeofficeSeniorDresden, Chemnitz, Berlin
- commercetoolsPrincipal Engineer, Product Security(m/w/x)Vollzeitmit HomeofficeSeniorBerlin