# Product Security Engineer (PSIRT - Product Security Incident Response Team) at Replit

- Company: Replit
- What the company does: Describe what you want. Replit builds it. Get a working app or website in minutes. No coding required. Backed by Y Combinator and a16z.
- Company website: https://replit.com
- Type: Startups
- Level: Mid level
- Location: Foster City, CA
- Work setup: Remote
- Pay: $180K to $325K base salary per year (USD)
- Posted: 2026-04-20
- Apply by: 2026-10-08
- Apply: https://jobs.ashbyhq.com/replit/1634b879-80c7-4064-be0a-8a4aecc81923
- Page: https://www.1752.vc/careers/jobs/replit-product-security-engineer-psirt-product-security-incident-response-team/

## About the role

We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.

## What they're looking for

- Experience running or triaging for bug bounty programs (HackerOne ideally)
- Strong ability to triage, validate, and reproduce vulnerabilities independently
- Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc
- Familiarity with cloud platforms (GCP preferred) and SaaS architectures
- Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals

Tags: Engineering