AppSec Engineer: Vulnerability & SBOM Lead

Replit, Inc.; Foster City (CA); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Competitive Salary & Equity

401(k) Program with a 4% match

Health, Dental, Vision and Life Insurance

Flexible Time Off (FTO) + Holidays

Commuter Benefits

Monthly Wellness Stipend

In Office Amenities

Job summary

Replit, Inc. in Foster City, California is seeking a mid-level AppSec Vulnerability Management Engineer. The role requires identifying application vulnerabilities, maintaining software supply chain security, and ensuring regulatory compliance. The ideal candidate should have 5 years of experience in AppSec or similar, with strong foundations in software development.

The role involves close collaboration with development teams and frequent interaction with executive management on vulnerability reporting. Competitive salary and comprehensive benefits package offered.

Qualifications

• Solid foundational experience working in a software development capacity.
• Ability to read, understand, and safely patch security flaws.
• Strong familiarity with build systems and package managers.
• Understanding of how vulnerability management maps to security compliance frameworks.

Responsibilities

• Perform periodic application security scanning activities.
• Track, document, and manage vulnerabilities according to strict compliance SLAs.
• Escalate and report critical exposures directly to senior leadership.
• Maintain audit-ready evidence of remediation timelines.
• Partner with development teams to provide clear mitigation paths.

Skills

Application Security

DevSecOps

Software Engineering

JavaScript/TypeScript

Python

Go

SAST

SCA

Secret Scanning tools

Education

5 years of experience in Application Security, DevSecOps, or Software Engineering roles

Tools

Snyk

Socket

Wiz Code

Semgrep

Checkmarx

Job description

Replit, Inc. in Foster City, California is seeking a mid-level AppSec Vulnerability Management Engineer. The role requires identifying application vulnerabilities, maintaining software supply chain security, and ensuring regulatory compliance. The ideal candidate should have 5 years of experience in AppSec or similar, with strong foundations in software development.

The role involves close collaboration with development teams and frequent interaction with executive management on vulnerability reporting. Competitive salary and comprehensive benefits package offered.