RefolkCandidates
JobsBuild my resume

Senior Technical Program Manager, Security

Replit · Foster City, CA

$190k - $250k/yrRemoteSeniorEngineeringITSecurityPosted Yesterday
Apply with a tailored resumeView the original posting

About this role

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role: We are seeking a Senior Technical Program Manager to own our vulnerability management program end to end. In this role, you will drive vulnerability intake, triage, remediation, and reporting across our bug bounty program, our Google Cloud Platform (GCP) infrastructure, source code hosted on GitHub, and a broad portfolio of third-party SaaS services. You will partner closely with platform engineering, product engineering, SRE, security, IT, legal, and vendor management to make sure vulnerabilities are found fast, triaged accurately, and closed within SLA - and that leadership always has a clear, current picture of the organization's risk posture.The ideal candidate uses AI and automation aggressively to scale themselves, but understands that the core value is clarity, tradeoffs, and execution, not just tooling. What you'll do: - Program Ownership: Own and continuously improve the vulnerability management program, including intake, severity scoring (CVSS/risk-based), SLA definition, and remediation tracking across all asset types. - Bug Bounty Operations: Manage the triage/payouts/rewards workflow, and report on program health and trends. - Cloud Remediation (GCP): Drive remediation of vulnerabilities found in GCP infrastructure - IAM, networking, Compute/GKE, storage, and logging/monitoring configuration - by partnering with security, cloud, and platform engineering teams. - Code & Supply Chain Security: Coordinate remediation of vulnerabilities surfaced through SAST/DAST/SCA tooling (Wiz Code, Snyk, Dependabot, code scanning, secret scanning) across engineering repos, including dependency and supply-chain risk. - SaaS Vendor Risk: Build and manage the process for assessing and tracking security posture

Excerpt from the posting Replit published. Read the full description on their site before applying.

Skills this posting mentions

Identity & Access Management (IAM)AutomationProduct Engineering

About Replit

We’re on a mission to make programming collaborative, accessible, and fun for everyone. Creating the future of computing is a team effort, though

All 88 openings at Replit

Apply to this role, tailored

Queue Senior Technical Program Manager, Security at Replit and I will read the posting, rewrite your resume against it, draft the cover letter, and score the fit before you send anything.

Applications finish as drafts. Nothing is sent until you read it and press send. New accounts start with 500 free credits.

Tailor my applicationHow it works

More roles at Replit

See all

Similar roles elsewhere

See more

Listed from the job board Replit publishes. Refolk is not the employer and does not handle their hiring. Applications go to Replit directly.