3 months ago
Base Salary
$210k - $270k/yr
Responsibilities
- Perform application security scanning, review results, and prioritize vulnerabilities based on CVSS scores, exploitability, and system exposure.
- Track, document, and manage vulnerabilities against compliance SLAs while maintaining audit-ready remediation and exception evidence.
- Report critical exposures to the CISO and senior leadership and maintain dashboards and alerting for vulnerability status, risk trends, and compliance posture.
- Own and update the organization’s Software Bill of Materials and help mature software supply chain security across SLSA levels.
- Partner with development teams on mitigation strategies and review, write, or patch code to remediate security flaws.
- Configure and tune automated security testing tools in CI/CD pipelines to reduce false positives.
- Support incident response by developing and implementing real-time code or infrastructure countermeasures during security incidents.
Requirements
- Five years of experience in application security, DevSecOps, or software engineering.
- Solid foundational experience working in software development.
- Ability to read, understand, and safely patch security flaws in JavaScript/TypeScript, Python, and Go.
- Strong familiarity with build systems, package managers, and compilation workflows across multiple languages and frameworks.
- Hands-on experience operating SAST, SCA, and secret-scanning tools such as Snyk, Socket, Wiz Code, Semgrep, or Checkmarx.
- Understanding of vulnerability management within compliance frameworks such as SOC 2, ISO 27001, or NIST.
- Ability to lead major technical initiatives autonomously and influence technical alignment across teams.
Benefits
- Full-time employee benefits include competitive salary and equity, a 401(k) program with a 4% match for US employees, health, dental, vision, and life insurance, short- and long-term disability coverage, paid parental, medical, and caregiver leave, flexible time off and holidays, commuter benefits, a monthly wellness stipend, an autonomous work environment, in-office setup reimbursement, quarterly team gatherings, and in-office amenities.
- The role is based in the Foster City, California office and requires working in-office Monday, Wednesday, and Friday.
Tech Stack
Categories
About Replit
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide and over 500,000 business users, Replit is democratizing software development by removing traditional barriers to application creation.