Product Security Engineer (PSIRT - Product Security Incident Response Team)
Core
Lead the vulnerability response program for Replit's cloud-native AI platform, owning the lifecycle of security vulnerabilities from intake to public disclosure.
Role type
Senior IC Product Security Engineer (PSIRT)
Builds
Secure cloud-native AI platform and SaaS services
Domain
Cloud Security / Web Application Security / Bug Bounty Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
Vulnerability triage and validation, Bug bounty program management, Web/app/cloud exploit analysis, CI/CD workflow understanding, Coordinated disclosure processes, CVE management
Preferred skills
Python/Go/Bash scripting, Offensive security/pentesting background, SOC 2/ISO 27001 compliance knowledge, Public advisory writing, SIEM/Cloud Logging tooling
Technologies
HackerOne, GCP, OWASP, OIDC/OAuth, CI/CD pipelines, SIEM, Cloud Logging
Responsibilities
Manage vulnerability intake from bug bounty platforms and scanners, Independently reproduce and validate security findings, Coordinate remediation with engineering and security teams, Design and evolve the bug bounty program scope and rewards, Lead coordinated vulnerability disclosure and CVE assignment processes
Seniority
Senior, hands-on IC
