Engineering Manager Application Security in Foster City

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're hiring a hands-on Engineering Manager to build and lead Replit's Anti-Abuse team from the ground up. This is a foundational 0-to-1 role: you'll define the anti-abuse roadmap, hire a small team of engineers and data analysts, and ship the systems that protect Replit's platform, users, and economics from adversarial actors. You'll partner across Support, Legal, Security, Infrastructure, and the Money and Growth teams to make abuse economically unviable while keeping friction low for legitimate users. Replit sits at the frontier of AI-native abuse. Our platform is a target for phishing and scam hosting, cryptomining, LLM token farming, card and coupon fraud, and increasingly, abuse driven by AI agents themselves. The team you build will define how Replit defends against all of it. What You'll Do Build the anti-abuse roadmap from scratch : Define the threat model, prioritize across abuse vectors (phishing/scam hosting, cryptomining, token farming, payment fraud, AI agent exploitation), and translate it into a shipping plan with clear sequencing and tradeoffs. Design progressive verification and identity infrastructure : Build the "ladder of trust" that gates increasing platform capabilities (referrals, additional credits, access to powerful agent features, Missions) behind escalating verification. This includes a humanity/identity layer that's distinct from user accounts, integrations with KYC-grade verification providers, and the policy engine that decides what level of trust unlocks what behavior. This infrastructure is core not just to promo integrity but to how Replit safely expands agent capabilities over time. Ship as a hands-on EM : Stay in the code. Use the latest AI coding tools (including Rep

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Replit is the fastest way to turn ideas into software. With Replit Agent, anyone can build and ship a real application in natural language, without setting up a single tool. We've grown explosively, from $2M to $400M+ revenue in under a year, with a global community of 60+ million users, and Replit Agent is now one of the fastest-growing products in history. That same wave is now hitting the enterprise. Companies like Visa, Ernst & Young and Comcast are rolling Replit out to thousands of employees so finance teams, operations leads, and product managers can build without waiting on an engineering backlog. When a company puts Replit in the hands of thousands of employees, they're trusting us with their data and their workflows. That trust has to be earned: SSO and SCIM that just work, governance their security team will sign off on, and real control over where their apps run and how their data is handled. Getting this right is what turns a pilot into a company-wide standard, and it's one of the biggest levers on Replit's next phase of growth. About the Role We're hiring a Staff Product Manager to own Replit's enterprise product end to end. We've built one of the best coding agents in the world. The work now is making it just as powerful inside a big company, where putting it in front of every non-technical employee unlocks enormous leverage. That means extending what Agent can do in an enterprise context and building the platform that lets large organizations adopt it safely and at scale. This is a role with unusual leverage. We're still early in our enterprise journey but the traction is remarkable, which means most of the platform is still to be built and you'll have an outsized hand in shaping it. You'll decide w

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure. This role requires strong technical ability to reproduce vulnerabilities , deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly. What You’ll Do Vulnerability Intake, Triage & Validation Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels. Independently validate, reproduce, severity-score, and document findings. Identify duplicates and maintain a clean vulnerability records pipeline. Assess relevance and exploitability using OWASP, cloud misconfiguration patterns, and identity/authentication/authorization risks (Oauth, OIDC). Remediation Coordination & SLA Management Work with Engineering, SecOps, IT, SRE, and Cloud Security to confirm product impact and drive remediation. Provide detailed reproduction steps, proof-of-concepts, and technical analyses. Track SLAs, remediation progress, regression testing, and systemic improvements. Support SOC 2, ISO 27001, and pentest evidence needs as part of vulnerability lifecycle governance. Bug Bounty & Vulnerability Disclosure Program Management Design and evolve the bug bounty program, including scope, rules, and reward structures. Man

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About Replit Replit is building the world's most ubiquitous AI coding agent. Replit Agent can be used by anybody to bring their ideas to life. Whether it's an app for yourself, the next great startup idea, or a tool to make you more productive at work, Replit Agent can help build it. Replit is also the leader in secure vibe coding. We protect apps, give users features to manage security risks, and help them vibe code more safely. About the role: Replit is changing how people and companies turn ideas into software. Reaching those customers requires engineering that connects acquisition to the product experience and gives teams trustworthy evidence about what works. This role goes beyond operating conventional marketing technology. You will rethink growth systems for a world where agents can observe performance, diagnose problems, take action, and learn from the result. As the founding engineer for Growth Enablement, you will set the technical direction for this area. You will build agentic systems alongside shared foundations for attribution, audiences, lifecycle engagement, referrals, and promotions. The work spans web, mobile, billing, and data. You will work directly with marketing, sales, and partnerships to find the highest-leverage problems and ship the first solutions. Successful projects will become platforms that help these teams move faster and give Replit a clearer view of what drives durable growth. You will: Design agentic growth systems that monitor performance, diagnose failures, run approved experiments, and improve from the results. Explore AI-native approaches to answer engine optimization, campaign operations, audience discovery, and measurement. Build acquisition measurement across web and mobile, in

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About Replit Replit is building the world’s most ubiquitous AI coding agent. Replit Agent can be used by anybody to bring their ideas to life. Whether it’s an app for yourself, the next great startup idea, or a tool to make you more productive at work, Replit Agent can help build it. Replit is also the leader in secure vibe coding. We protect apps, give users features to manage security risks, and help them vibe code more safely. About the Role In this role you will build powerful tools that help product engineers iterate rapidly on the Agent experience and directly enhance the core Agent itself. You’ll bridge the gap between the AI team (working on the core Agent logic) and the UX team (crafting delightful Agent experiences), enabling both groups to excel within their specialties. This role blends systems engineering, developer experience and product engineering. We tackle complex challenges across the full stack, from browser-based interfaces to high-performance backends to Linux systems engineering. We’re looking for engineers who have a keen sense of the product experience and how to power it with performant systems. On this team, you’ll have the opportunity to grow your skills across our infrastructure and product, and to lead end-to-end efforts with meaningful impact. We value diverse perspectives and encourage candidates from all backgrounds and experiences to apply. You Will Build high-throughput backend applications and services, like streaming chat between user and agent. Design a collaborative "Multiplayer Computer" that lets humans and AI agents work together on shared shells, filesystems, and state—conflict-free and in real time. Develop infrastructure (frontend & backend) that empowers product enginee

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're looking for a Product Engineer to join as an early member of our new Enterprise team. The consumer story has demonstrated Replit’s magic and now we are seeing use cases emerge in the B2B space that are ripe for innovation and growth. It is a critical area for our success this year and beyond. You can be part of the journey to build and scale features that help teams and organizations of any size be more productive with Replit. This is an opportunity to make meaningful impact and shape the culture and processes from the ground up. Working closely with cross-functional teams including product managers, designers, and AI engineers, you'll craft solutions that enable our customers to build, deploy, and share their applications seamlessly. This role requires both technical expertise and a deep understanding of user needs to deliver features that make an impact. In this role you will: Build and own features across the full stack that serve enterprise customers, from backend services to user-facing interfaces Design and implement scalable solutions for teams and organizations. This includes enterprise-readiness features like authentication, permissions, security, and compliance, as well as tools that improve team collaboration and drive adoption within an organization. Work directly with customers to understand their needs and iterate on solutions Contribute to technical decisions and architecture for the Enterprise platform Collaborate closely with Product, Design, and other Engineering teams to deliver high-quality experiences Mentor other engineers and raise the bar for engineering excellence Ship quickly and iterate based on customer feedback and usage data Required skills and experience: Strong full

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: We're seeking an Engineering Manager, UX to help build the future of AI user interfaces. In this role, you'll build and manage a team that bridges design and engineering to create intuitive, performant user interfaces that make software creation accessible on any device. You'll guide your team in building production-ready frameworks and patterns that enable high-quality in-product experiences. You’ll also help your team build core user interfaces for interacting with AI. You will: Build, mentor, and grow a team of frontend engineers, reenforcing Replit’s culture of UI excellence and craft. Define the technical vision and strategy for building/extending user interface frameworks in order to help Replit ship high quality user experiences fast. Engage design and product engineering teams to understand, triage, and prioritize requirements. Set an ambitious vision for the future of AI user interfaces, and help the team sequence the steps to make it a reality. Help the Design team tastefully refine designs by taking into account technical constraints, timelines and resources. Use your deep understanding of technology, the product, and UI, to increase the quality, performance and usage of Replit’s most important surfaces. Required skills and experience: 4+ years of engineering management experience with a track record of building and scaling high-performing teams. Proven experience delivering ambitious projects that require coordinating across multiple teams / departments. Deep technical experience in many of the following: React, CSS, CSS frameworks, mobile web, Figma. Excellent communication skills to balance technical leadership with people management, including mentoring, performance management, and career

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We’re looking for a Product Marketing Manager to grow Replit’s core creation products, including Design and Slides. These products already give people new ways to turn an idea into something they can see, share, and use. Your job is to help more people discover them, understand when to use them, and make them part of their regular workflow. You’ll own the connection between the product and its audiences: developing positioning grounded in customer needs, leading launches, finding channels that can drive sustained adoption, tracking the competitive landscape, and bringing market feedback back to Product. This role sits at the intersection of Product, Engineering, Growth, Brand, and Creative. It is a hands-on role for someone who can develop the strategy, write the narrative, and get the work into the market. What You'll Do Own the positioning and growth strategy for Replit’s core products, including Design and Slides. Develop audience-focused narratives, identify new use cases and channels, bring product improvements to market, and build programs that drive adoption, engagement, and conversion. Track competitors and customer needs, then translate those insights into sharper messaging, stronger go-to-market decisions, and actionable feedback for Product and Engineering. Required Skills & Experience Self-starter: You take ownership, work through ambiguity, and move from strategy to execution without waiting for a perfect brief. Audience-focused: You turn customer insight into clear positioning, relevant narratives, and campaigns built for specific audiences. Growth-minded: You find creative ways to expand adoption, test new channels and tactics, and turn successful experiments into repeatable programs.

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role: We’re looking for a Senior Product Marketing Manager to help accelerate the growth of Replit Agent — a core part of our mission to allow anyone to build software, without any coding experience. This role sits at the crossroads of product, engineering, and go-to-market , ensuring that every new feature we ship lands with clarity, excitement, and impact. You’ll work closely with our engineers, PMs and Partnership teams to understand the product roadmap, then translate those innovations into compelling narratives that resonate with builders of all kinds — from solo builders to enterprise teams. You’ll also leverage your storytelling expertise to collaborate with our partner ecosystem , crafting compelling “Better Together” narratives that elevate our joint value and propel partner marketing initiatives. Replit moves fast — we ship continuously, experiment relentlessly, and aim to make every builder more productive and creative. We’re looking for someone who thrives in that environment: part strategist, part storyteller, and part operator. What You’ll Do: Lead Product Marketing for our Launches Develop and operationalize Replit’s launch motion — from early roadmap planning through public release. Create repeatable frameworks that keep launches fast, clear, and coordinated. Shape Messaging & Positioning Craft technically fluent, developer-first narratives that highlight how Replit’s AI coding agent accelerates creativity and productivity. Tailor messaging to different developer segments and channels. Create Sales & Growth Enablement Build the first generation of enablement materials (decks, demos, battlecards, FAQs) that empower GTM teams and partners to tell Replit’s story confidently. Lead Competit

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Role Summary Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. As a Disputes and Chargeback Program Manager at Replit, you’ll be part of our Trust and Safety Operations team, who owns customer-facing workflows that handle sensitive and policy-driven interactions across the Support organization. This includes areas such as privacy requests, DMCA and intellectual property claims, law enforcement requests, and abuse appeals. You'll own Replit's disputes and chargeback function end-to-end: from the individual case in front of you to the policies, playbooks, and automation that let it hold up as we scale to millions of users. This role combines strategic ownership with hands-on execution: you'll determine dispute and chargeback strategy, and build the systems that make those decisions repeatable at scale, working closely with Engineering, Legal and Finance. In this role you will… Own the full dispute lifecycle: investigate incoming chargebacks and disputes, decide whether and how to represent, gather evidence, and respond within network deadlines. Design and maintain the policies, decision trees, and SOPs that govern how disputes and chargebacks are handled. Define the key metrics, health targets, and goals for the disputes program and track performance against them, reporting to leadership. Monitor chargeback rates and dispute trends to identify the underlying drivers of volume, and partner with Engineering and Finance to address root causes. Partner with Engineering and Support Operations to automate manual parts of the wor