Senior Security Software Engineer, v0 - Vercel

About Vercel

Vercel is the agentic infrastructure company. We create products like Next.js, v0, and AI SDK that help builders move from idea to production with speed, security, and exceptional developer experience. We are building the platform for the next generation of products—those built, extended, and operated by agents.

About the Role

v0 turns natural language into working, deployed applications. As a Senior (IC4) Security Software Engineer, you will be fully embedded within the v0 team. You are not a rotating auditor; you are a peer engineer who owns security end-to-end. You will build features, fix bugs, and ship to production while ensuring the security of sandboxed code execution, multi-tenant isolation, and protection against prompt injection.

What You Will Do

• Find and fix issues: Proactively hunt for vulnerabilities and ship the fixes yourself.
• Build security features: Design and implement sandboxing, isolation controls, and permission boundaries as part of the product roadmap.
• Review launches: Act as the security reviewer of record for all new v0 features and integrations.
• Manage HackerOne: Triage and drive fixes for security reports, working directly with the researcher community.
• Own the threat model: Continuously refine defenses for code generation, execution, and deployment.
• Harden boundaries: Work on scoping and constraining agent-generated code before it touches infrastructure.
• Build guardrails: Create libraries and patterns that allow the team to ship quickly without reintroducing common bug classes.
• Partner with Product Security: Collaborate with the central security team while maintaining autonomy over v0-specific tradeoffs.

About You

• Software Engineer First: 5+ years of experience building and shipping production web applications.
• Full-Stack Fundamentals: Proficient in TypeScript, React, and Node.js.
• Security Judgment: Deep understanding of authN/authZ, sandboxing, and injection vulnerabilities.
• Influence through Code: You prefer fixing root causes in PRs over writing policy documents.
• Comfort with Ambiguity: Excited to define the threat model for a novel, evolving product.

Benefits

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Mentorship and professional development opportunities.
• Flexible Time Off.
• Gear and WFH budget to outfit your workspace.