Describe what you want. Replit builds it. Get a working app or website in minutes. No coding required. Backed by Y Combinator and a16z.
About the role
We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
What they're looking for
- Experience running or triaging for bug bounty programs (HackerOne ideally)
- Strong ability to triage, validate, and reproduce vulnerabilities independently
- Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc
- Familiarity with cloud platforms (GCP preferred) and SaaS architectures
- Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals
More about this role
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
This role requires strong technical ability to reproduce vulnerabilities , deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly.
Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels.
Independently validate, reproduce, severity-score, and document findings.
Identify duplicates and maintain a clean vulnerability...
Browse similar: Startup jobs · Remote jobs