RefolkCandidates
JobsBuild my resume

Security Engineer - Vuln Management (Code)

Replit · Foster City, CA

$210k - $270k/yrRemoteMid levelEngineeringITSecurityPosted 2 months ago
Apply with a tailored resumeView the original posting

About this role

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. WHAT YOU'LL DO CORE RESPONSIBILITIES - Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. - Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. - Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. - Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. - Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. - Tooling Integration: Configure and tune automated securit

Excerpt from the posting Replit published. Read the full description on their site before applying.

Skills this posting mentions

JavaScriptSupply Chain ManagementPython

About Replit

We’re on a mission to make programming collaborative, accessible, and fun for everyone. Creating the future of computing is a team effort, though

All 88 openings at Replit

Apply to this role, tailored

Queue Security Engineer - Vuln Management (Code) at Replit and I will read the posting, rewrite your resume against it, draft the cover letter, and score the fit before you send anything.

Applications finish as drafts. Nothing is sent until you read it and press send. New accounts start with 500 free credits.

Tailor my applicationHow it works

More roles at Replit

See all

Similar roles elsewhere

See more

Listed from the job board Replit publishes. Refolk is not the employer and does not handle their hiring. Applications go to Replit directly.