Product Security Engineer (PSIRT - Product Security Incident Response Team)

replit· 46 open roles

Remote RemoteFullTime2 months ago

Salary

Undisclosed

Experience

Mid

Job Type

FullTime

Posted

2 months ago

Apply Now

Get more other jobs in your inbox

Verified daily — no ghost listings.

About This RoleAI processing…

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.

Key Responsibilities

1
You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
2
You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly.

Requirements

Experience running or triaging for bug bounty programs (HackerOne ideally).
Strong ability to triage, validate, and reproduce vulnerabilities independently.
Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc.
Familiarity with cloud platforms (GCP preferred) and SaaS architectures.
Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals.