# Product Security Engineer (PSIRT - Product Security Incident Response Team)

Hiring organization: [Replit](https://career.thegoodapps.co/organizations/replit)

Canonical page: https://career.thegoodapps.co/jobs/e61cff73-1bf0-4215-a9ee-eeae714d8d7d

Listed on Replit's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Mid
- Location: Foster City, CA
- Remote: yes
- Salary: 180000 – 325000 USD per year

## Summary

Replit seeks a security professional to manage their vulnerability response program, handling everything from bug bounty intake and triage through coordinated disclosure and CVE publication. This role suits someone with hands-on vulnerability assessment experience and the ability to work across technical and program management dimensions.

_Our summary, not Replit's wording._

## Skills named

Bash (Scripting), CI/CD, Go, Python

## Required

- Experience running or triaging bug bounty programs
- Independently triage, validate, and reproduce vulnerabilities
- Deep understanding of web, app, and cloud vulnerability classes
- Familiarity with cloud platforms, preferably GCP
- Understanding of CI/CD workflows and software engineering fundamentals

## Nice to have

- Python, Go, or Bash scripting and automation
- Pentesting or offensive security background
- SOC 2 and ISO 27001 compliance knowledge
- Experience writing public security advisories or CVE documentation
- Hands-on experience with SIEM and cloud logging tools

Apply on Replit's site: https://jobs.ashbyhq.com/replit/1634b879-80c7-4064-be0a-8a4aecc81923/application