Product Security Engineer in Foster City

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure. This role requires strong technical ability to reproduce vulnerabilities , deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly. What You’ll Do Vulnerability Intake, Triage & Validation Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels. Independently validate, reproduce, severity-score, and document findings. Identify duplicates and maintain a clean vulnerability records pipeline. Assess relevance and exploitability using OWASP, cloud misconfiguration patterns, and identity/authentication/authorization risks (Oauth, OIDC). Remediation Coordination & SLA Management Work with Engineering, SecOps, IT, SRE, and Cloud Security to confirm product impact and drive remediation. Provide detailed reproduction steps, proof-of-concepts, and technical analyses. Track SLAs, remediation progress, regression testing, and systemic improvements. Support SOC 2, ISO 27001, and pentest evidence needs as part of vulnerability lifecycle governance. Bug Bounty & Vulnerability Disclosure Program Management Design and evolve the bug bounty program, including scope, rules, and reward structures. Man

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Replit is the fastest way to turn ideas into software. With Replit Agent, anyone can build and ship a real application in natural language, without setting up a single tool. We've grown explosively, from $2M to $400M+ revenue in under a year, with a global community of 60+ million users, and Replit Agent is now one of the fastest-growing products in history. That same wave is now hitting the enterprise. Companies like Visa, Ernst & Young and Comcast are rolling Replit out to thousands of employees so finance teams, operations leads, and product managers can build without waiting on an engineering backlog. When a company puts Replit in the hands of thousands of employees, they're trusting us with their data and their workflows. That trust has to be earned: SSO and SCIM that just work, governance their security team will sign off on, and real control over where their apps run and how their data is handled. Getting this right is what turns a pilot into a company-wide standard, and it's one of the biggest levers on Replit's next phase of growth. About the Role We're hiring a Staff Product Manager to own Replit's enterprise product end to end. We've built one of the best coding agents in the world. The work now is making it just as powerful inside a big company, where putting it in front of every non-technical employee unlocks enormous leverage. That means extending what Agent can do in an enterprise context and building the platform that lets large organizations adopt it safely and at scale. This is a role with unusual leverage. We're still early in our enterprise journey but the traction is remarkable, which means most of the platform is still to be built and you'll have an outsized hand in shaping it. You'll decide w

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Team Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly. Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do. These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services. Our work is high-leverage and horizontal: when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls. We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request. We care more about how you reason and build than the route you took to get here. About the Role As a Software Engineer , you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity. The work is guided by a few simple questions: Can every protected request prove which workload made it, which principal it represents, and who is acting on that principal's behalf? Can product teams express policy once and trust the same decision across web, mobile, Agent, and internal services? Can enterprise administrators control who can access each workspace, app, connector, and Agent capability without navigating a permission maze as well as having a legible ledger of decisions? Can Agent act for a user across long-running and durable work without receiving broad or long-lived credentials? Are identity and auth

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About Replit Replit is building the world's most ubiquitous AI coding agent. Replit Agent can be used by anybody to bring their ideas to life. Whether it's an app for yourself, the next great startup idea, or a tool to make you more productive at work, Replit Agent can help build it. Replit is also the leader in secure vibe coding. We protect apps, give users features to manage security risks, and help them vibe code more safely. About the role: Replit is changing how people and companies turn ideas into software. Reaching those customers requires engineering that connects acquisition to the product experience and gives teams trustworthy evidence about what works. This role goes beyond operating conventional marketing technology. You will rethink growth systems for a world where agents can observe performance, diagnose problems, take action, and learn from the result. As the founding engineer for Growth Enablement, you will set the technical direction for this area. You will build agentic systems alongside shared foundations for attribution, audiences, lifecycle engagement, referrals, and promotions. The work spans web, mobile, billing, and data. You will work directly with marketing, sales, and partnerships to find the highest-leverage problems and ship the first solutions. Successful projects will become platforms that help these teams move faster and give Replit a clearer view of what drives durable growth. You will: Design agentic growth systems that monitor performance, diagnose failures, run approved experiments, and improve from the results. Explore AI-native approaches to answer engine optimization, campaign operations, audience discovery, and measurement. Build acquisition measurement across web and mobile, in

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About Replit Replit is building the world’s most ubiquitous AI coding agent. Replit Agent can be used by anybody to bring their ideas to life. Whether it’s an app for yourself, the next great startup idea, or a tool to make you more productive at work, Replit Agent can help build it. Replit is also the leader in secure vibe coding. We protect apps, give users features to manage security risks, and help them vibe code more safely. About the Role In this role you will build powerful tools that help product engineers iterate rapidly on the Agent experience and directly enhance the core Agent itself. You’ll bridge the gap between the AI team (working on the core Agent logic) and the UX team (crafting delightful Agent experiences), enabling both groups to excel within their specialties. This role blends systems engineering, developer experience and product engineering. We tackle complex challenges across the full stack, from browser-based interfaces to high-performance backends to Linux systems engineering. We’re looking for engineers who have a keen sense of the product experience and how to power it with performant systems. On this team, you’ll have the opportunity to grow your skills across our infrastructure and product, and to lead end-to-end efforts with meaningful impact. We value diverse perspectives and encourage candidates from all backgrounds and experiences to apply. You Will Build high-throughput backend applications and services, like streaming chat between user and agent. Design a collaborative "Multiplayer Computer" that lets humans and AI agents work together on shared shells, filesystems, and state—conflict-free and in real time. Develop infrastructure (frontend & backend) that empowers product enginee

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Join our FDE team and work directly with some of the world's largest organizations to turn their most ambitious ideas into production applications on Replit. As a Forward Deployed Engineer, you'll partner closely with customers to understand their technical and business needs, architect solutions, and build the integrations and applications required to deploy Replit successfully within complex enterprise environments. This is a deeply technical and hands-on role. You won’t just advise customers on what to build—you’ll build alongside them. You’ll take applications from initial idea and prototype through deployment and production, navigate complex enterprise environments, and solve the technical challenges that emerge when AI-powered software development meets real-world infrastructure, data, security, and organizational constraints. You will: Build with Customers: Embed with strategic enterprise customers to design and build high-impact applications and AI-powered workflows on Replit, taking projects from initial concept through production deployment. Architect Enterprise Solutions: Design secure, scalable architectures that connect Replit with customers’ existing systems, data, APIs, identity providers, and infrastructure. Integrate with the customer's stack: SSO, data warehouses, internal APIs, and SaaS systems. Own Technical Deployments: Serve as the technical owner for complex enterprise implementations, identifying blockers, debugging issues, and driving projects through to successful production adoption. Bridge Customers and Product: Develop a deep understanding of how enterprises use Replit and translate field insights, technical constraints, and recurring customer needs into actionable feedback

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're looking for a Product Engineer to join as an early member of our new Enterprise team. The consumer story has demonstrated Replit’s magic and now we are seeing use cases emerge in the B2B space that are ripe for innovation and growth. It is a critical area for our success this year and beyond. You can be part of the journey to build and scale features that help teams and organizations of any size be more productive with Replit. This is an opportunity to make meaningful impact and shape the culture and processes from the ground up. Working closely with cross-functional teams including product managers, designers, and AI engineers, you'll craft solutions that enable our customers to build, deploy, and share their applications seamlessly. This role requires both technical expertise and a deep understanding of user needs to deliver features that make an impact. In this role you will: Build and own features across the full stack that serve enterprise customers, from backend services to user-facing interfaces Design and implement scalable solutions for teams and organizations. This includes enterprise-readiness features like authentication, permissions, security, and compliance, as well as tools that improve team collaboration and drive adoption within an organization. Work directly with customers to understand their needs and iterate on solutions Contribute to technical decisions and architecture for the Enterprise platform Collaborate closely with Product, Design, and other Engineering teams to deliver high-quality experiences Mentor other engineers and raise the bar for engineering excellence Ship quickly and iterate based on customer feedback and usage data Required skills and experience: Strong full

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We're seeking an experienced Commercial Counsel to join our growing legal team and serve as a strategic partner to our rapidly expanding enterprise sales organization. In this high-impact role, you'll drive complex commercial negotiations that fuel our growth, working closely with our sales teams to close sophisticated technology agreements with enterprise customers across diverse industries. You'll play a critical role in scaling our commercial legal processes while navigating the evolving landscape of AI-powered development tools and ensuring our customers can confidently deploy Replit's platform in their organizations. What You'll Do Drive Enterprise Deals : Serve as the lead legal advisor for complex, high-value enterprise sales transactions, working directly with our Account Executives and customer legal teams to negotiate and close sophisticated software agreements Navigate AI & Technology Compliance : Help enterprise customers understand and navigate the legal and regulatory implications of adopting AI-powered development tools, addressing data privacy, security, and compliance requirements across various industries Build Scalable Frameworks : Design and implement contract playbooks, template agreements, and streamlined processes that enable our sales team to move quickly while maintaining legal rigor as we scale Risk Management : Identify, analyze, and proactively manage complex commercial and legal risks while maintaining deal velocity in our fast-paced, high-growth environment Cross-Functional Partnership : Collaborate closely with Product, Engineering, Security, and Privacy teams to ensure our commercial offerings align with product capabilities and regulatory requirements Strategic Advisory : Provide st

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role leads the global SOC function—monitoring, SIEM ownership, detection engineering, alert triage, and operational readiness—while also evaluating and integrating emerging AI-based SOC products and autonomous response platforms . You will oversee monitoring across multi-cloud environments (GCP primary, AWS/Azure secondary), Kubernetes, SaaS services, endpoints, developer tools, and AI workloads . You’ll collaborate closely with Cloud Security, Compliance/GRC, SRE, Platform Engineering, IT/Endpoint teams, and AI Infrastructure to ensure our detection strategy scales and stays ahead of evolving threats. This is a hands-on leadership role perfect for someone who wants to shape the SOC of the future while solving complex challenges in a high-scale AI setting. What You’ll Do SOC Leadership & 24/7 Monitoring Lead, mentor, and scale a global SOC team responsible for 24/7 monitoring, alert intake, triage, correlation, and escalation. Build operational rigor: processes, runbooks, SLAs, metrics, and quality standards for high-scale environments. Cover monitoring across: Cloud infrastructure (GCP, AWS, Azure) Kubernetes/GKE/EKS/AKS clusters SaaS platforms (Google Workspace, GitHub, Slack, Okta, etc.) Endpoints (macOS, Linux, Windows) including EDR/XDR telemetry Developer platforms + CI/CD pipelines AI/ML systems and model-serving workflows AI-Based SOC Integration & Innovation Evaluate, adopt, and integrate AI-native SOC technologies for triaging, detection, and correlation Identify opportunities to automate triage, investigations,

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: We're hiring a Product Partnerships Manager to own Replit's most important strategic partnerships end-to-end: from identifying the opportunity to shipping the outcome and measuring the impact. This is a product-focused role where you will work with our consumer technology partners, such as Stripe, Shopify, Google, and the broader connector ecosystem. You'll work at the intersection of product strategy, ecosystem thinking, and deal execution. You'll need to be a serious Replit power user. You'll speak credibly with engineers. You'll negotiate with senior partner stakeholders. And you'll be the person accountable for turning ambiguous ecosystem opportunities into shipped product and business outcomes. What You'll Do Develop a clear point of view on Replit's partner landscape and build a prioritized pipeline of high-leverage opportunities across consumer tooling, AI tooling, cloud and infrastructure, and payments technology partners. Lead partner conversations from early exploration through joint product thesis, business case, commercial terms, launch plan, and post-launch iteration. Partner with Product, Engineering, Partner Engineering, Legal, Finance, Marketing, and Sales to turn agreements into shipped outcomes. Work directly with Partner Engineers to scope integrations, demos, prototypes, reference apps, and partner enablement assets. Define success metrics before every launch activation: retained usage, apps created, deployments, revenue, partner-sourced users, and use them to decide when to scale, iterate, or sunset a partnership. Build lightweight operating systems: partner scorecards, launch checklists, partner roadmap tracking, and repeatable frameworks for evaluating new opportunities. Represent

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We’re looking for a Product Marketing Manager to grow Replit’s core creation products, including Design and Slides. These products already give people new ways to turn an idea into something they can see, share, and use. Your job is to help more people discover them, understand when to use them, and make them part of their regular workflow. You’ll own the connection between the product and its audiences: developing positioning grounded in customer needs, leading launches, finding channels that can drive sustained adoption, tracking the competitive landscape, and bringing market feedback back to Product. This role sits at the intersection of Product, Engineering, Growth, Brand, and Creative. It is a hands-on role for someone who can develop the strategy, write the narrative, and get the work into the market. What You'll Do Own the positioning and growth strategy for Replit’s core products, including Design and Slides. Develop audience-focused narratives, identify new use cases and channels, bring product improvements to market, and build programs that drive adoption, engagement, and conversion. Track competitors and customer needs, then translate those insights into sharper messaging, stronger go-to-market decisions, and actionable feedback for Product and Engineering. Required Skills & Experience Self-starter: You take ownership, work through ambiguity, and move from strategy to execution without waiting for a perfect brief. Audience-focused: You turn customer insight into clear positioning, relevant narratives, and campaigns built for specific audiences. Growth-minded: You find creative ways to expand adoption, test new channels and tactics, and turn successful experiments into repeatable programs.

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're looking for an AI-native product growth lead to own Replit's entire paid acquisition and lifecycle marketing engine as the single DRI. This is an IC role for someone who builds systems, not just campaigns. Someone who uses AI and automation aggressively to do what traditionally requires an entire team. You don't need an engineering background. You need the instinct to build: when you see a repetitive task, you reach for Replit or an API before you reach for a spreadsheet. You'll have data science and data engineering partners for infrastructure and modeling, and brand marketing will set creative direction. Your job is to turn that direction into a closed-loop optimization system: a self-improving system that turns performance data into better creative, optimizes spend across channels in near-real-time, and compounds every insight so nothing learned is ever lost. Each cycle, the system gets smarter. That's the engine you'll build and own. The ideal candidate has deep channel expertise across paid search, paid social, and lifecycle, but their real edge is building AI-powered workflows that scale creative production, automate measurement, and compound institutional knowledge. You Will Own full-funnel performance marketing across paid search & social, ASO, and lifecycle Build a self-improving creative engine: AI-driven ad generation, testing, and iteration that scales without scaling headcount Maintain a persistent knowledge layer so every experiment, result, and creative insight compounds automatically into the next cycle Own conversion signal quality end-to-end: right events, right audiences, right attribution, partnering with DE on the infrastructure Run a structured experimentation program wher

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role As a Product Engineer, you’ll take emerging ideas from concept to polished experiences. You’ll build sophisticated, intuitive user experiences while working across AI models, agentic workflows, and all parts of web infrastructure to ship complete products. The Goal: Build products that can define major new categories for Replit. You will combine the flexibility of software with the accessibility of presentations, spreadsheets, dashboards, and visual editors, enabling anyone to create powerful, interactive artifacts through natural language. The Audience: We build for the next generation of creators, knowledge workers, and high-leverage teams. Our users should be able to turn an idea, dataset, or business problem into a polished, editable, and shareable product just by themselves. Candidates who thrive here often have the product judgment, technical range, and ownership mindset associated with founders. This is a high-visibility role working closely with product leadership. How we work Structure: We operate as a collective of in-house technical founders, not narrowly specialized engineers. Initiatives are run by lean, autonomous teams built for velocity and technical leverage. Engineers maintain meaningful ownership over technical direction, product quality, and launch success, supported by Product and Design partners. Cadence: We work in focused three-week sprints, shipping quickly, observing real user behavior, and incorporating feedback into each iteration. We value decisive execution, thoughtful experimentation, and the ability to make progress without perfectly defined requirements. What you’ll do Own major product experiences from initial concept through design, implementation, launch, measurement,