Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
🏢 About Replit
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
🎯 The Role
We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
✅ Key Responsibilities
Vulnerability Intake, Triage & Validation
Remediation Coordination & SLA Management
Bug Bounty & Vulnerability Disclosure Program Management
Coordinated Disclosure & CVE Management
📌 Required Qualifications
Experience running or triaging for bug bounty programs (HackerOne ideally).
Strong ability to triage, validate, and reproduce vulnerabilities independently.
Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc.
Familiarity with cloud platforms (GCP preferred) and SaaS architectures.
Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals.
⭐ Desirable Experience
Scripting or automation experience (Python, Go, Bash).
Pentesting background or exposure to offensive security work.
Familiarity with compliance frameworks such as SOC 2 and ISO 27001.
Experience authoring public advisories or CVE writeups.
Hands-on experience with SIEM, Cloud Logging, and investigative tooling.
🎁 Benefits
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
🛂 Visa & Eligibility
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
