Senior Technical Program Manager (Security)

TL;DR

Senior Technical Program Manager (Security): Owning the end-to-end vulnerability management program with an accent on bug bounty operations, GCP infrastructure remediation, and supply chain security. Focus on automating triage processes, managing risk posture across SaaS environments, and ensuring SLA compliance for critical findings.

Location: Hybrid (Foster City, CA). In-office requirement: Monday, Wednesday, and Friday.

Salary: $190K – $250K

Company

Replit is an agentic software creation platform that enables anyone to build applications using natural language.

What you will do

• Own and improve the vulnerability management program, including intake, severity scoring (CVSS), and remediation tracking.
• Manage bug bounty operations, including triage and payout workflows, and report on program health.
• Drive remediation of vulnerabilities in GCP infrastructure, covering IAM, networking, Compute/GKE, and storage.
• Coordinate supply chain security and remediation using SAST/DAST/SCA tooling across GitHub repositories.
• Establish a single source of truth for risk trends with dashboards for executive and security leadership.
• Support audit and compliance efforts for SOC 2 and ISO 27001.

Requirements

• 4-6+ years of experience in technical program management, security program management, or security operations.
• Hands-on experience running a bug bounty program (e.g., HackerOne, Bugcrowd).
• Working knowledge of GCP security fundamentals, including IAM and Security Command Center.
• Familiarity with GitHub-based development workflows and security tools like Snyk, Semgrep, or CodeQL.
• Strong grasp of CVSS and risk-based prioritization frameworks.
• Must be based in or be able to work from Foster City, CA on a hybrid schedule (Mon, Wed, Fri).

Nice to have

• Experience supporting compliance frameworks such as PCI-DSS or FedRAMP.
• Proven ability to build reporting dashboards in Tableau, Looker, Jira, or ServiceNow.

Culture & Benefits

• Competitive salary and equity.
• 401(k) program with a 4% match.
• Comprehensive health, dental, vision, and life insurance.
• Flexible Time Off (FTO) and paid parental, medical, and caregiver leave.
• Autonomous work environment with monthly wellness stipends and in-office amenities.