Replit logo
Monthly
€13,022 - €23,511
Posted April 20, 2026 · 132 days agoLast seen August 26, 2026Est. expiry May 25, 2026

Product Security Engineer

Product Security Engineer (PSIRT - Product Security Incident Response Team)
About the role

Replit is the agentic software creation platform that enables anyone to build applications using natural language. We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for our cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure. This role requires strong technical ability to reproduce vulnerabilities, deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly. This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday. Full-Time Employee Benefits Include: Competitive Salary & Equity, 401(k) with match, health/dental/vision, disability, parental leave, flexible time off, commuter benefits, wellness stipend, autonomous environment, in-office setup reimbursement, quarterly team gatherings, in-office amenities. To learn more visit Replit resources.

Job Details

Responsibilities

  • Vulnerability Intake, Triage & Validation tasks as described.
  • Remediation Coordination & SLA Management tasks as described.
  • Bug Bounty & Vulnerability Disclosure Program Management tasks as described.
  • Coordinated Disclosure & CVE Management tasks as described.

Requirements

  • Experience running or triaging for bug bounty programs (HackerOne ideally).
  • Strong ability to triage, validate, and reproduce vulnerabilities independently.
  • Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc.
  • Familiarity with cloud platforms (GCP preferred) and SaaS architectures.
  • Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals.

Skills & Technologies

Bug bounty platforms (HackerOne)OWASP Top 10CI/CD workflowsGCPSaaS architectures
Seen 4 days agoPartial Schema
Replit logo
Replit · 12 open roles
Top locations: Remote - France · 2 · Remote - Europe · 2 · Remote - Ireland · 2+3 other locations
View company
Current open roles at Replit on JobCrawls
LocationActive listings
Remote - France2
Remote - Europe2
Remote - Ireland2
Remote - Italy2
Remote - Netherlands2
Remote - United Kingdom2
Current role mix at Replit on JobCrawls
Role typeActive listings
Site Reliability Engineer2
Current role-level mix at Replit on JobCrawls
Role levelActive listings
Senior2

Help us improve JobCrawls — sign in to sync saved jobs across devices, or send feedback anytime.