Product Security Engineer PSIRT Product Security Incident Response Team
Replit is an agentic AI software-creation platform for creating, launching, and growing apps, websites, tools, and businesses through natural language.
Funding history
About Replit
Replit combines an AI agent with integrated application infrastructure—including authentication, databases, hosting, monitoring, integrations, and enterprise controls—to let users build and deploy software from one workspace.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the product vulnerability lifecycle from intake and validation through remediation coordination and public disclosure. You will reproduce and assess findings, work with technical stakeholders to resolve issues, operate the bug bounty program, and coordinate CVE disclosures and advisories.
Requirements
- Experience running or triaging bug bounty programs
- Ability to triage, validate, and independently reproduce vulnerabilities
- Knowledge of web, application, and cloud vulnerability classes
- Knowledge of OWASP Top 10, cloud misconfigurations, and authentication and authorization risks
- Familiarity with GCP and SaaS architectures
- Understanding of CI/CD workflows, code structure, and software engineering fundamentals
Responsibilities
- Manage vulnerability intake from bug bounty platforms, customers, scanners, pentests, and disclosure channels
- Validate, reproduce, severity-score, and document vulnerabilities
- Assess exploitability and maintain vulnerability records
- Coordinate remediation, SLA tracking, regression testing, and evidence collection
- Design and manage the bug bounty program
- Communicate with security researchers and determine reward payouts
- Lead coordinated disclosure, CVE assignments, and public advisories
Benefits
- Equity
- 401(k) program with 4% match
- Health, dental, vision, and life insurance
- Short-term and long-term disability insurance
- Paid parental, medical, and caregiver leave
- Flexible time off and holidays
- Commuter benefits
- Monthly wellness stipend
- In-office setup reimbursement
- Quarterly team gatherings
- In-office amenities