Position:
Senior Technical Program Manager, Security
Company:
Replit
Compensation:
$190K – $250K
Location:
United States, Foster City, CA
Employment Type:
Full time
Work Arrangement:
Hybrid
Short Summary:
We are seeking a Senior Technical Program Manager to own our vulnerability management program end to end, driving vulnerability intake, triage, remediation, and reporting across various platforms and services.
Responsibilities:
- Own and continuously improve the vulnerability management program.
- Manage bug bounty operations, including triage/payouts/rewards workflow.
- Drive remediation of vulnerabilities in GCP infrastructure.
- Coordinate remediation of vulnerabilities surfaced through security tooling.
- Build and manage the process for assessing security posture across third-party SaaS applications.
- Define and enforce escalation paths for critical findings.
- Partner with engineering managers to embed remediation work into sprint planning.
- Establish and maintain a single source of truth for vulnerability status and trends.
- Support audit and compliance efforts by keeping vulnerability management evidence audit-ready.
- Drive process improvements and automation to enhance time-to-remediation.
Requirement:
- 4–6+ years of experience in technical program management or security operations.
- Hands-on experience running a bug bounty program.
- Working knowledge of GCP security fundamentals.
- Familiarity with GitHub-based development workflows and code security tooling.
- Strong grasp of vulnerability scoring frameworks and risk-based prioritization.
- Excellent cross-functional communication skills.
- Proven ability to build reporting/dashboards for leadership visibility.
- Experience supporting compliance frameworks such as SOC 2 or ISO 27001.
Benefits:
- Competitive Salary & Equity
- 401(k) Program with a 4% match (US Only)
- Health, Dental, Vision and Life Insurance
- Short Term and Long Term Disability
- Paid Parental, Medical, Caregiver Leave
- Flexible Time Off (FTO) + Holidays
- Commuter Benefits (In-Office Only)
- Monthly Wellness Stipend
- Autonomous Work Environment
- In Office Set-Up Reimbursement (In-Office Only)
- Quarterly Team Gatherings
- In Office Amenities (In-Office Only)