Security Engineer - Vuln Management (Code)

About this role

Replit is seeking a mid-level Security Engineer focused on Application Security Vulnerability Management. The role involves identifying software vulnerabilities, ensuring compliance with regulatory standards, and collaborating with development teams to enhance security measures while serving as a technical responder during incidents.

What you'll do

• Conduct vulnerability scanning and triage flaw reports
• Manage and track vulnerabilities for compliance
• Prepare executive reports and dashboards on security status
• Maintain and update Software Bill of Materials for compliance
• Collaborate with development teams for remediation
• Support incident response during active security breaches

What they're looking for

• 5 years in Application Security or Software Engineering
• Software development experience
• Knowledge in JavaScript, TypeScript, Python, and Go
• Familiarity with build systems and package managers
• Experience with SAST and SCA tools
• Understanding of compliance frameworks like SOC 2 and ISO 27001

Benefits

• Competitive Salary & Equity
• 401(k) with 4% match
• Health, Dental, Vision and Life Insurance
• Flexible Time Off + Holidays
• Paid Parental and Medical Leave
• Monthly Wellness Stipend