Replit

2 months ago

Security Engineer - Vuln Management (Code)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Mid-level AppSec Vulnerability Management Engineer responsible for identifying application vulnerabilities, maintaining software supply chain security, and ensuring regulatory compliance (SOC 2, ISO 27001, PCI-DSS). Acts as a technical responder during security incidents, collaborates with engineering to patch flaws, and reports risk to senior leadership while maturing SBOM and SLSA practices.

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure.
•Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals.
•Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture.
•Software Supply Chain Security: Ownership of SBOM inventories and maturity of supply chain security through various SLSA levels.
•Remediation Collaboration: Partner with development teams to provide mitigation paths, review, write, and patch code to resolve security flaws.

Pay and Benefits

Salary: USD 210,000 - 270,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceEquity401kRemote WorkCommuter Benefits

Key Requirements

•5 years of experience in Application Security, DevSecOps, or Software Engineering roles.

Experience:5+ yearsCybersecuritySoftware security

Skills:Systems thinkingAutonomyProblem-solvingInfluenceCollaboration

Languages:English

Tech Stack:JavaScriptTypeScriptPythonGoSLSASBOMSASTSCASemgrepCheckmarxSnyk

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Replit

2 months ago

Security Engineer - Vuln Management (Code)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure.
•Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals.
•Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture.
•Software Supply Chain Security: Ownership of SBOM inventories and maturity of supply chain security through various SLSA levels.
•Remediation Collaboration: Partner with development teams to provide mitigation paths, review, write, and patch code to resolve security flaws.

Pay and Benefits

Salary: USD 210,000 - 270,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceEquity401kRemote WorkCommuter Benefits

Key Requirements

•5 years of experience in Application Security, DevSecOps, or Software Engineering roles.

Experience:5+ yearsCybersecuritySoftware security

Skills:Systems thinkingAutonomyProblem-solvingInfluenceCollaboration

Languages:English

Tech Stack:JavaScriptTypeScriptPythonGoSLSASBOMSASTSCASemgrepCheckmarxSnyk

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn