Security Engineer in Foster City

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Replit is the fastest way to turn ideas into software. With Replit Agent, anyone can build and ship a real application in natural language, without setting up a single tool. We've grown explosively, from $2M to $400M+ revenue in under a year, with a global community of 60+ million users, and Replit Agent is now one of the fastest-growing products in history. That same wave is now hitting the enterprise. Companies like Visa, Ernst & Young and Comcast are rolling Replit out to thousands of employees so finance teams, operations leads, and product managers can build without waiting on an engineering backlog. When a company puts Replit in the hands of thousands of employees, they're trusting us with their data and their workflows. That trust has to be earned: SSO and SCIM that just work, governance their security team will sign off on, and real control over where their apps run and how their data is handled. Getting this right is what turns a pilot into a company-wide standard, and it's one of the biggest levers on Replit's next phase of growth. About the Role We're hiring a Staff Product Manager to own Replit's enterprise product end to end. We've built one of the best coding agents in the world. The work now is making it just as powerful inside a big company, where putting it in front of every non-technical employee unlocks enormous leverage. That means extending what Agent can do in an enterprise context and building the platform that lets large organizations adopt it safely and at scale. This is a role with unusual leverage. We're still early in our enterprise journey but the traction is remarkable, which means most of the platform is still to be built and you'll have an outsized hand in shaping it. You'll decide w

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're redefining how software is built and who gets to build it. Our mission is to achieve Autonomy for All: making programming accessible, collaborative, and powered by AI. Realizing that vision requires a platform that legitimate users can trust and adversarial actors cannot exploit. We're hiring a Data Scientist to help build Replit's Trust & Safety and Anti-Abuse program from the ground up. You'll turn noisy behavioral, identity, payment, infrastructure, and content signals into the measurement systems, detections, and decisions that protect Replit's users, platform, and economics. You'll work closely with Engineering, Support, Legal, Security, Infrastructure, Money, and Growth to make abuse economically unviable while keeping friction low for legitimate users. Replit sits at the frontier of AI-native abuse. Our platform is a target for phishing and scam hosting, cryptomining, LLM token farming, card and coupon fraud, referral abuse, and increasingly, abuse driven by AI agents themselves. You'll help define how we identify, measure, and respond to these threats without compromising the experience of good users. Who You Are You're a data scientist who moves fast, goes deep, and thinks adversarially. You can spin up an analysis in hours that would take others days, not by cutting corners, but because you've built the intuition and technical toolkit to get to the right answer quickly. You dig past the top-line abuse rate to understand selection effects, missing labels, policy changes, attacker adaptation, and the false positives hidden inside an aggregate metric. You understand that Trust & Safety data is imperfect and outcomes are high stakes. Ground truth is delayed, biased, and often incomple

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We're seeking an experienced Commercial Counsel to join our growing legal team and serve as a strategic partner to our rapidly expanding enterprise sales organization. In this high-impact role, you'll drive complex commercial negotiations that fuel our growth, working closely with our sales teams to close sophisticated technology agreements with enterprise customers across diverse industries. You'll play a critical role in scaling our commercial legal processes while navigating the evolving landscape of AI-powered development tools and ensuring our customers can confidently deploy Replit's platform in their organizations. What You'll Do Drive Enterprise Deals : Serve as the lead legal advisor for complex, high-value enterprise sales transactions, working directly with our Account Executives and customer legal teams to negotiate and close sophisticated software agreements Navigate AI & Technology Compliance : Help enterprise customers understand and navigate the legal and regulatory implications of adopting AI-powered development tools, addressing data privacy, security, and compliance requirements across various industries Build Scalable Frameworks : Design and implement contract playbooks, template agreements, and streamlined processes that enable our sales team to move quickly while maintaining legal rigor as we scale Risk Management : Identify, analyze, and proactively manage complex commercial and legal risks while maintaining deal velocity in our fast-paced, high-growth environment Cross-Functional Partnership : Collaborate closely with Product, Engineering, Security, and Privacy teams to ensure our commercial offerings align with product capabilities and regulatory requirements Strategic Advisory : Provide st