15 hours ago

Senior Technical Program Manager, Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Own the end-to-end vulnerability management program across bug bounty, Google Cloud (GCP) infrastructure, GitHub-hosted source code, and third-party SaaS. Drive intake, severity scoring (CVSS/risk-based), SLA definition, remediation tracking, escalation/exception workflows, and executive reporting with a single source of truth. Partner with engineering, SRE, security, IT, legal, and vendors to improve time-to-remediation using automation, dashboards, and audit-ready evidence.

Location: California

Workplace: Hybrid

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Seniority: Mid level

Key Responsibilities

•Own and continuously improve the vulnerability management program, including intake, severity scoring, SLA definition, and remediation tracking across assets.
•Run bug bounty operations, managing triage and payout/rewards workflows and reporting program health and trends.
•Drive vulnerability remediation in GCP infrastructure (IAM, networking, Compute/GKE, storage, and logging/monitoring) with security and engineering partners.
•Coordinate code and supply chain security remediation using SAST/DAST/SCA tooling, including dependency and supply-chain risk.
•Establish reporting/alerting with a single source of truth for vulnerability status, SLA compliance, risk trends, and provide audit/compliance support with evidence.

Pay and Benefits

Salary: USD 190,000 - 250,000 annually

Equity and Bonus:Equity

Perks:Equity401kHealth InsuranceDentalVisionLife InsuranceDisabilityPaid ParentalPaid LeaveFlexible TimeCommuter BenefitsWellness StipendIn OfficeMeal AllowanceQuarterly Gatherings

Key Requirements

•4–6+ years in technical program management, security program management, or security operations with direct ownership of a vulnerability management or application security program.
•Hands-on experience running a bug bounty program, including triage and payout/rewards workflows.
•Working knowledge of GCP security fundamentals, including IAM, VPC/networking, Security Command Center, and Cloud Logging/Monitoring.
•Familiarity with GitHub-based development workflows and code security tooling such as Wiz Code, Dependabot, and SAST/DAST/SCA tools (Snyk, Semgrep, CodeQL).
•Strong vulnerability risk prioritization using CVSS and risk-based frameworks, with experience supporting compliance frameworks like SOC 2 and ISO 27001.

Experience:4+ yearsSecurity operationsBug bountyCloud securitySaaS security

Skills:Cross-functional communicationSystems thinkingTechnical influenceAutonomyBias for action

Tech Stack:CVSSGCPIAMVPCSecurity Command CenterCloud LoggingCloud MonitoringGitHubWiz CodeSnykDependabotSASTDASTSCACode scanningSecret scanningSemgrepCodeQLHackerOneBugcrowd

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Replit

15 hours ago

Senior Technical Program Manager, Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: California

Workplace: Hybrid

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Seniority: Mid level

Key Responsibilities

•Own and continuously improve the vulnerability management program, including intake, severity scoring, SLA definition, and remediation tracking across assets.
•Run bug bounty operations, managing triage and payout/rewards workflows and reporting program health and trends.
•Drive vulnerability remediation in GCP infrastructure (IAM, networking, Compute/GKE, storage, and logging/monitoring) with security and engineering partners.
•Coordinate code and supply chain security remediation using SAST/DAST/SCA tooling, including dependency and supply-chain risk.
•Establish reporting/alerting with a single source of truth for vulnerability status, SLA compliance, risk trends, and provide audit/compliance support with evidence.

Pay and Benefits

Salary: USD 190,000 - 250,000 annually

Equity and Bonus:Equity

Perks:Equity401kHealth InsuranceDentalVisionLife InsuranceDisabilityPaid ParentalPaid LeaveFlexible TimeCommuter BenefitsWellness StipendIn OfficeMeal AllowanceQuarterly Gatherings

Key Requirements

•4–6+ years in technical program management, security program management, or security operations with direct ownership of a vulnerability management or application security program.
•Hands-on experience running a bug bounty program, including triage and payout/rewards workflows.
•Working knowledge of GCP security fundamentals, including IAM, VPC/networking, Security Command Center, and Cloud Logging/Monitoring.
•Familiarity with GitHub-based development workflows and code security tooling such as Wiz Code, Dependabot, and SAST/DAST/SCA tools (Snyk, Semgrep, CodeQL).
•Strong vulnerability risk prioritization using CVSS and risk-based frameworks, with experience supporting compliance frameworks like SOC 2 and ISO 27001.

Experience:4+ yearsSecurity operationsBug bountyCloud securitySaaS security

Skills:Cross-functional communicationSystems thinkingTechnical influenceAutonomyBias for action

Tech Stack:CVSSGCPIAMVPCSecurity Command CenterCloud LoggingCloud MonitoringGitHubWiz CodeSnykDependabotSASTDASTSCACode scanningSecret scanningSemgrepCodeQLHackerOneBugcrowd

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn