Agentic Risk Analyst in Foster City

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: As a Legal Operations Manager at Replit, you will be the central point of contact for legal requests across the company and the operational backbone of our contract lifecycle. You will triage and manage incoming legal requests, own contract management end to end, and support broader corporate compliance and data privacy work. Your meticulous attention to detail and proactive approach will keep legal operations running smoothly and reduce risk across the business. Think of yourself as the air traffic controller of our legal universe — making sure every contract, request, and approval lands safely, on time, and in the right hands. Your meticulous attention to detail and proactive approach will not just keep Legal running smoothly — it will make the whole company move faster. If you love building systems, closing loops, and being the person everyone turns to when they need to get something done right, this role was made for you. What You'll Do: Legal Operations Drive the Legal team's operational strategy, understand operational challenges, identify opportunities to improve systems and workflows Implement, maintain, and optimize a best in class AI driven tech stack. Partner cross functionally with AI and GTM/marketing/partnerships teams to identify technologies, negotiate with vendors, and drive implementation. Partner closely with Finance and Legal leadership to manage budget, forecasting, accruals, and track spend Working closely with leadership, own planning cycles, OKRs, and data reporting and metrics Manage outside counsel relationships, including new engagements, billing guidelines invoicing, and e-billing. Drive outside counsel management strategy with a focus on cost discipline and operational accou

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role Replit is the agentic software creation platform that enables anyone to build applications using natural language. As we scale to support millions of developers and enterprise organizations, maintaining a robust, transparent, and technically sound Governance, Risk, and Compliance (GRC) program is critical. We are looking for a GRC Engineer to serve as a key technical contributor for our compliance and risk management ecosystem. You will architect the systems and processes that automate trust, partnering deeply across the organization. We need a pragmatic operator who understands that GRC exists to enable the business—balancing rigorous standards with the velocity of a high-growth startup. What You'll Do Technical Excellence & Architecture Technical Depth: Act as a technical subject matter expert for the GRC team. You will drive quality, technical depth, and operational efficiency in our security controls. Program Architecture: Own the technical vision for Replit’s GRC program, moving the team from manual workflows toward "Compliance-as-Code" and automated evidence collection. Thought Leadership: Champion a culture of security and privacy across the company, educating teams on why controls exist rather than just enforcing them. Cross-Functional Collaboration Engineering & Architecture: Partner with Architects and Engineering Leads to "bake in" compliance requirements early in the design phase. You will translate complex technical implementations into narratives that satisfy frameworks without slowing down development. Legal & Privacy: Work closely with Legal Counsel to interpret and implement requirements for Privacy (GDPR, CCPA) and emerging AI-specific regulations (e.g., EU AI Act). Sales &a

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. The Mandate: Industry Disruption and 10x Scale: Vision: Product Foundry is Replit's internal engine for innovation . We move Replit beyond being a collaborative development environment to becoming the foundational operating system for the entire next generation of software, where AI Agents are the primary actors. The 10x Goal: Our purpose is to launch high-risk, full-stack 0→1 initiatives that define and establish entirely new, multi-billion-dollar product categories. We are seeking non-linear growth opportunities, fundamentally aiming to 10x Replit's value and addressable market by proving out unprecedented technical primitives and disruptive Go-To-Market strategies. The Audience: We build for the next generation of creators and high-leverage users and enterprises, equipping them with tools that enable them to build anything, anywhere . Candidates that do well here will certainly go on to build their own companies in the future! This is a high visibility role reporting to Execution Model: High-Agency Founding Teams Structure: We operate as a collective of in-house technical founders —not just specialized engineers. Initiatives are run by lean, autonomous squads built for velocity and maximum technical leverage. This model is centered around an Engineer DRI (Directly Responsible Individual) who maintains total ownership over the initiative's technical, product, and launch success, supported by fractional PM and Design resources. Cadence: We enforce rapid iteration and rapid market validation via 3-week sprints per initiative. This cadence forces fast deployment, immediate user feedback, and tight alignment with the internal betting table process, mirroring the intensity and speed of a lean startup. Required skills and

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We're seeking an experienced Commercial Counsel to join our growing legal team and serve as a strategic partner to our rapidly expanding enterprise sales organization. In this high-impact role, you'll drive complex commercial negotiations that fuel our growth, working closely with our sales teams to close sophisticated technology agreements with enterprise customers across diverse industries. You'll play a critical role in scaling our commercial legal processes while navigating the evolving landscape of AI-powered development tools and ensuring our customers can confidently deploy Replit's platform in their organizations. What You'll Do Drive Enterprise Deals : Serve as the lead legal advisor for complex, high-value enterprise sales transactions, working directly with our Account Executives and customer legal teams to negotiate and close sophisticated software agreements Navigate AI & Technology Compliance : Help enterprise customers understand and navigate the legal and regulatory implications of adopting AI-powered development tools, addressing data privacy, security, and compliance requirements across various industries Build Scalable Frameworks : Design and implement contract playbooks, template agreements, and streamlined processes that enable our sales team to move quickly while maintaining legal rigor as we scale Risk Management : Identify, analyze, and proactively manage complex commercial and legal risks while maintaining deal velocity in our fast-paced, high-growth environment Cross-Functional Partnership : Collaborate closely with Product, Engineering, Security, and Privacy teams to ensure our commercial offerings align with product capabilities and regulatory requirements Strategic Advisory : Provide st

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Team Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly. Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do. These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services. Our work is high-leverage and horizontal: when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls. We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request. We care more about how you reason and build than the route you took to get here. About the Role As a Software Engineer , you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity. The work is guided by a few simple questions: Can every protected request prove which workload made it, which principal it represents, and who is acting on that principal's behalf? Can product teams express policy once and trust the same decision across web, mobile, Agent, and internal services? Can enterprise administrators control who can access each workspace, app, connector, and Agent capability without navigating a permission maze as well as having a legible ledger of decisions? Can Agent act for a user across long-running and durable work without receiving broad or long-lived credentials? Are identity and auth

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: We're hiring a Product Partnerships Manager to own Replit's most important strategic partnerships end-to-end: from identifying the opportunity to shipping the outcome and measuring the impact. This is a product-focused role where you will work with our consumer technology partners, such as Stripe, Shopify, Google, and the broader connector ecosystem. You'll work at the intersection of product strategy, ecosystem thinking, and deal execution. You'll need to be a serious Replit power user. You'll speak credibly with engineers. You'll negotiate with senior partner stakeholders. And you'll be the person accountable for turning ambiguous ecosystem opportunities into shipped product and business outcomes. What You'll Do Develop a clear point of view on Replit's partner landscape and build a prioritized pipeline of high-leverage opportunities across consumer tooling, AI tooling, cloud and infrastructure, and payments technology partners. Lead partner conversations from early exploration through joint product thesis, business case, commercial terms, launch plan, and post-launch iteration. Partner with Product, Engineering, Partner Engineering, Legal, Finance, Marketing, and Sales to turn agreements into shipped outcomes. Work directly with Partner Engineers to scope integrations, demos, prototypes, reference apps, and partner enablement assets. Define success metrics before every launch activation: retained usage, apps created, deployments, revenue, partner-sourced users, and use them to decide when to scale, iterate, or sunset a partnership. Build lightweight operating systems: partner scorecards, launch checklists, partner roadmap tracking, and repeatable frameworks for evaluating new opportunities. Represent

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. As a Premium Support Engineer at Replit, you’ll be the front line for our highest-value customers — delivering fast, expert, and reliable technical support when it matters most. You’ll handle complex product issues, guide customers through critical incidents, and ensure every interaction meets the highest standard of quality and speed. Replit is at the forefront of AI-driven software development, and how we support customers is constantly evolving. You’ll play a critical role in shaping how Premium Support adapts to new products, new customer expectations, and AI-assisted workflows, operating effectively in ambiguity and driving clarity for your team. You’ll combine deep technical troubleshooting with calm, confident communication to keep builders moving — whether it’s an enterprise team deploying at scale or a top-tier developer relying on Replit to power their business. In this role you will: Provide swift, high-priority support to Premium customers, responding within strict SLAs. Diagnose, reproduce, and resolve complex technical issues across the Replit platform. Escalate and track high-impact issues with Product and Engineering, ensuring timely fixes and transparent communication. Lead customer-facing communications during outages or incidents. Identify recurring issues and collaborate internally to reduce time-to-resolution. Contribute to internal tooling, automation, and documentation that improves team efficiency. Partner with Engineering, Product, Sales and other internal teams to ensure Premium customers receive a consistent, high-quality experience. Help onboard and mentor other support engineers, raising the team’s overall bar for responsiveness and quality. Required skills and experience: 3+ years in techn

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Replit is building a modern, AI-native learning function, and we're looking for a Sr. Learning Experience Lead to own it. You'll own our learning platform and the onboarding and enablement experiences that run on it: designing them, delivering them, turning them into durable on-demand learning, and proving they work. This is a builder-leader role. You'll design learning, facilitate it live, build it into the platform, and measure its impact, and you'll do much of that hands-on, in the tools, the way a modern builder works. You'll start close to home and grow the mandate. Your initial focus is owning the onboarding experience for our Support organization, taking it end-to-end and turning it into a real, tracked, repeatable system. Over time, you'll elevate onboarding and enablement beyond Support to the broader company, partnering with our People team, with the learning platform as the vehicle. What You'll Do Own the learning platform. As its DRI, you own the roadmap, the learning journeys, and the instructional design behind them. You make the calls and own the outcomes. Support onboarding, end-to-end. Facilitation, the live-to-on-demand pipeline, and the role-based journeys that get new team members confident and productive fast. Create content and learning plans. Prescriptive learning paths and the content that fills them. Own measurement criteria and data-driven results: The layer that proves onboarding and enablement change behavior and speed ramp, not just completion rates, with the tracking and feedback loops that keep it healthy over time. As the mandate grows. Grow the platform and the learning function as adoption expands, raising the bar for how people learn at Replit. Required Skills & Experience Deep L&

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: As a New Grad Software Engineer, you'll join a team of exceptional builders working on products that are reshaping how the world creates software. You'll have the opportunity to work on everything from our AI-powered development platform to the distributed systems that enable real-time collaboration for millions of developers. This is a chance to define your career while defining the future of software development. You'll work on problems that matter, with the autonomy to drive solutions and the support to grow into a technical leader. What you will build: Product features that delight users and make it possible for anybody to create software AI coding agent that understands intent and generates production-ready applications Cloud infrastructure that provides instant, powerful development environments at global scale Platform features that enable one click deployments and scale to millions of users Required skills and experience: Recent graduate (2027) with a degree in Computer Science, Computer Engineering, or related field Strong programming skills in a modern language (JavaScript/TypeScript, Python, Go, Rust) Full-stack capabilities with experience in React, Node.js, and database technologies Growth orientation - eager to learn new technologies and take on increasing responsibility Collaborative spirit - you work well in cross-functional teams and value diverse perspectives What we value : Problem-solving mindset: Ability to approach complex operational challenges systematically and devise effective solutions Self-directed and autonomous: Capable of working independently while collaborating effectively with cross-functional teams Strong communication skills: Ability to explain complex technical conce

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About Replit Replit is building the world's most ubiquitous AI coding agent. Replit Agent can be used by anybody to bring their ideas to life. Whether it's an app for yourself, the next great startup idea, or a tool to make you more productive at work, Replit Agent can help build it. Replit is also the leader in secure vibe coding. We protect apps, give users features to manage security risks, and help them vibe code more safely. About the role: Replit is changing how people and companies turn ideas into software. Reaching those customers requires engineering that connects acquisition to the product experience and gives teams trustworthy evidence about what works. This role goes beyond operating conventional marketing technology. You will rethink growth systems for a world where agents can observe performance, diagnose problems, take action, and learn from the result. As the founding engineer for Growth Enablement, you will set the technical direction for this area. You will build agentic systems alongside shared foundations for attribution, audiences, lifecycle engagement, referrals, and promotions. The work spans web, mobile, billing, and data. You will work directly with marketing, sales, and partnerships to find the highest-leverage problems and ship the first solutions. Successful projects will become platforms that help these teams move faster and give Replit a clearer view of what drives durable growth. You will: Design agentic growth systems that monitor performance, diagnose failures, run approved experiments, and improve from the results. Explore AI-native approaches to answer engine optimization, campaign operations, audience discovery, and measurement. Build acquisition measurement across web and mobile, in

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join Replit's key teams across the company, such as AI Research, Strategic Finance, or the Office of the CEO, for a unique paid internship built for sharp quantitative and creative minds. You will work alongside our top executives, in addition to world-class engineers, designers, and finance team on some of the hardest problems in AI-native software creation and accelerating key areas of our business. We are creating a dedicated track for students with strong mathematical backgrounds because the problems we are solving sit at the intersection of deep math and applied AI, including agent reasoning, systems optimization, and improving how our models learn and perform at scale. Your work will directly shape how millions of users build software. You Will: Contribute to real engineering problems that push the boundaries of AI-powered software creation Collaborate with engineers, designers, and product managers on infrastructure that powers Replit's platform Prototype novel approaches to problems in AI, systems, or tooling where mathematical rigor is the differentiator Ship work that impacts millions of developers globally, in an environment where your ideas are heard and often implemented Required Skills and Experience: Currently pursuing a Bachelor's, Master's, or PhD in Mathematics, Computer Science, Computer Engineering, Statistics, Physics, or a related quantitative field At least one semester of schooling remaining after the internship Demonstrated excellence in competitive mathematics such as IMO and IOI, quantitative research, or advanced coursework Genuine curiosity about AI, agent systems, company building, or developer tooling Extremely bullish on Replit and the future of AI-native software creation

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About The Role Replit is where millions of people learn to build software - and our documentation and learning content are where they get going or give up. We're taking ownership of that experience, and we're looking for a Learning Experience Creator who can make it worthy of the product: someone who turns product knowledge into experiences people actually use - clear written docs, guided learning, short video, interactive experiences - findable at the moment of need, accurate every time, and genuinely enjoyable. You're a learning-experience creator first. You understand how people actually learn a product - what they're trying to accomplish, where they get stuck, what format serves each moment - and you move fluidly between writing a crisp help article, designing a hands-on walkthrough, and producing a short video. Underneath it all, you're a storyteller: you know how to earn attention in the first few seconds, hold it against real-world attention spans, and make ideas stick - and sometimes make something people can't help but share. You're also a builder: unafraid to try new formats and experiment, you read the data and listen to customers, and you continually improve and evolve with speed as our product evolves. You'll turn complex things into simple, useful experiences, and you'll own how well they land. The Mission : help every user - external customers and internal teams - self-serve to reach their creative and business goals, with content so good, so current, and so findable that they don't need to open a ticket. Success looks like real ticket deflection, faster activation, and high CSAT. What You'll Own New documentation and learning content. You'll populate our documentation and learning surfaces with new, acc