Senior Security Software Engineer, v0

Overview

Senior Security Software Engineer for v0, owning security end to end for everything v0 ships as a peer engineer embedded in the v0 team.

What you'll do

• Proactively hunt for vulnerabilities across v0 and ship fixes.
• Design and implement security-facing product features (sandboxing/isolation controls, permission boundaries, abuse detection, safe defaults).
• Review every new v0 feature and launch before release.
• Triage, validate, and drive fixes for v0-related HackerOne reports.
• Own and continuously refine the v0 threat model (code generation, execution, deployment, prompt injection and tool misuse defenses).
• Harden agent-generated code execution boundaries and guardrails for generated apps.

What you'll need

• 5+ years building and shipping production web applications (independent IC4/Senior level).
• TypeScript, React, and Node experience to work in the v0 codebase.
• Understanding of authN/authZ design, sandboxing/isolation, and injection vulnerability classes.
• Ability to fix root causes via code rather than only process/policy.
• Comfort with ambiguity as the threat model is still being written.
• Willingness to build with v0 end to end, not only review externally.

Details

• Reports into the security organization and is deployed full-time with v0.