Real, live private-sector job listings — taken straight from the employers' own career pages
Replit · Foster City, CA · posted today
By AtiveSite · Published 07/11/2026 · Updated 10/11/2026 · Every figure is linked to its source below.
| Employer | Replit |
|---|---|
| Location | Foster City, California |
| Field | Technology › Software engineering |
| Level | not stated |
| Source category | Engineering, Security |
| Posted | 2026-11-10 (today) |
| Work arrangement | A remote or flexible location is listed |
| Pay | Not published in the source listing |
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the role:
We are looking for an Engineering Manager, Security to lead the teams that secure our cloud, our infrastructure, and the code we ship. You will manage two closely linked groups:
Cloud & Infrastructure Security: engineers who own cloud security posture, configuration hardening, and infrastructure vulnerability management across GCP, AWS, and Azure, plus containers, Kubernetes, and SaaS platforms.
Application Security & Secure SDLC: engineers who run our SCA, SAST, and IaC scanning programs, drive remediation with engineering teams, and deliver secure development training.
The core responsibility of this role is getting vulnerabilities fixed on time. You will partner with engineering teams across the company to drive remediation of cloud, infrastructure, and code findings within SLA, so that we consistently meet our compliance commitments (SOC 2, ISO 27001, PCI DSS, FedRAMP, and customer contracts). You will hire and grow a high-performing team, set the strategy and roadmap for vulnerability management from code to cloud, and make secure-by-default the easiest path for every developer. You will not run incident response yourself, but you need to understand it well enough to support the incident response team with context, prioritization, and follow-up fixes.
What You'll Do:
Build, lead, and mentor a team of cloud security, infrastructure vulnerability management, and application security engineers; own hiring, career development, and performance management.
Define the multi-year roadmap and quarterly OKRs for cloud security, vulnerability management, and Secure SDLC, balancing risk reduction against developer velocity.
Set clear ownership, operating rhythms, and on-call/escalation processes across the team.
Report on security posture, risk trends, and program metrics to engineering and executive leadership.
Own remediation SLAs by severity across cloud, infrastructure, container, and code findings, and make sure they map to our compliance obligations (SOC 2, ISO 27001, PCI DSS, FedRAMP, customer contracts).
Partner with engineering managers and tech leads to plan, prioritize, and land fixes within SLA without stalling roadmaps.
Run a regular remediation review with engineering leadership: open findings, SLA burn-down, upcoming SLA breaches, and owners.
Manage the exception and risk-acceptance process: documented justification, compensating controls, expiry dates, and approvals.
Build automated workflows that route findings to the right owning team, track them to closure, and escalate before SLAs are breached.
Work with Compliance/GRC to produce audit-ready evidence of remediation timeliness, and lead the security side of external audits for vulnerability management controls.
Track and report metrics such as SLA attainment, mean time to remediate, backlog age, and exceptions, by team and severity.
Lead infrastructure vulnerability management across cloud workloads, containers, registries, data stores, and platform services, from scanning and contextual risk triage to remediation workflows.
Oversee configuration hardening and secure baselines across GCP (primary) and supporting AWS and Azure environments.
Own the strategy for Cloud, Kubernetes, and Data Security Posture Management (CSPM, KSPM, DSPM) tooling; make sure findings are accurate, prioritized, and actionable.
Secure critical SaaS platforms with sound configurations, access controls, and integrations.
Partner with Platform and ML Infrastructure teams to secure multi-tenant and AI infrastructure.
Own the SCA, SAST, and IaC scanning programs end to end: tool selection, CI/CD integration, rule tuning, noise reduction, and developer experience.
Drive software supply chain security, including dependency management, SBOMs, artifact signing, and progress through SLSA levels.
Feed code-scanning findings into the central remediation workflow so they reach the owning team automatically and are tracked against SLA.
Shift IaC security left so misconfigurations are caught in pull requests, before they reach production.
Define and run the Secure SDLC program: security requirements, threat modeling, secure design reviews, and release gates proportionate to risk.
Build and deliver security training, including onboarding, role-based secure coding training, and targeted sessions driven by real vulnerability trends.
Develop paved roads, secure defaults, and guardrails that make the secure path the easiest path for engineers.
Grow a Security Champions network across engineering teams.
Understand the incident response lifecycle well enough to support the IR team: supply asset, exposure, and vulnerability context, and help assess blast radius.
Own follow-up remediation from incidents and postmortems that touch cloud, infrastructure, or code, and track it to closure.
Feed incident learnings back into scanning rules, secure baselines, and developer training.
Collaborate with Security Monitoring/Detection, Incident Response, Offensive Security, PSIRT, Architecture, DevOps, and Platform Engineering.
Help communicate security advisories, best practices, and updates to customers.
Tune into threat intelligence alerts to promptly manage patching of critical, exploitable vulnerabilities.
Required Skills & Experience:
8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers (or 3+ years as a tech lead with formal people-leadership responsibility).
Deep, hands-on knowledge of cloud security in GCP plus working knowledge of AWS and/or Azure: IAM, networking, logging, org policies, and security services.
Proven track record running vulnerability management programs at scale and driving remediation across many engineering teams to meet SLAs, across cloud infrastructure, containers, and application code.
Hands-on experience with CSPM/CNAPP platforms (e.g., Wiz, Orca, Prisma Cloud, Lacework, GCP Security Command Center).
Hands-on experience with SCA, SAST, and IaC scanning tools (e.g., Snyk, Semgrep, CodeQL, Checkmarx, Socket, Dependabot, Checkov, tfsec) and integrating them into CI/CD.
Strong understanding of Kubernetes and container security, and Infrastructure-as-Code (Terraform or similar).
Proven track record of building or maturing a Secure SDLC program, including developer security training.
Ability to write and review code or automation (Python, Go, TypeScript, or similar).
Strong understanding of how remediation SLAs and security controls map to compliance frameworks (SOC 2, ISO 27001, PCI DSS, FedRAMP, CIS, NIST), and experience producing audit evidence.
Working understanding of security incident response in cloud-native environments, enough to partner effectively with IR and detection teams.
Excellent communication skills, with the ability to influence engineering leaders and explain risk in business terms.
Bonus Qualifications:
Experience securing developer platforms, multi-tenant SaaS, or AI/ML infrastructure.
Experience with software supply chain frameworks (SLSA, Sigstore, SBOM standards).
Experience building a Security Champions program or developer-facing security tooling.
Experience leading the security side of external audits (SOC 2 Type II, ISO 27001, PCI DSS, or FedRAMP).
Relevant certifications (e.g., CCSP, GCP Professional Cloud Security Engineer, OSCP, CSSLP), though not required.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
Self-driving Company
Replit Agent at Scale
AI Adoption
Build Open-Source Apps
Interviewing + Culture at Replit
Operating Principles
Reasons not to work at Replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Field: Technology Sub-niche: Software engineering All jobs at Replit Jobs in California Jobs in Foster City, CA Foster City city guide California state guide San Mateo County economy
View this job and apply on the employer's page →
You apply on the employer's page; AtiveSite does not receive or process applications and is not affiliated with the employer. The description above is shown as the source published it.
This is a — role in the Technology field (Software engineering) at Replit.
We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.
Estimate for a wage earner: 2026 federal brackets and standard deduction (IRS), Social Security 6.2% up to $184,500, Medicare 1.45% (+0.9% above $200,000 single / $250,000 married), and a state rate you set; set your own state tax rate. It ignores credits, pre-tax deductions, local taxes and benefits. Sources: IRS: tax year 2026 inflation adjustments · SSA wage base per Federal Register notice 2025-19763.
This is editorial guidance, not information from the employer.
Know your rights as a candidate and an employee:
The job is in Foster City, CA. Below is what the official statistics say about living and working there.
How Foster City compares. Among the 145 largest places in California, Foster City is #131 by population, #140 for rent (#1 = cheapest), #10 for college degrees (#1 = most), #10 for remote work (#1 = most). Its county, San Mateo County, is #2 of 58 counties for average pay ($196,441).
Foster City has 32,792 residents (ACS 2020–2024), about 0.1% of the population of California. It covers 4 square miles of land, which works out to roughly 8,659 people per square mile. The median age is 39.5, 4% older than the state median (39.5 against 37.9).
The median gross rent is $3,501 a month (rent plus utilities), 72% above the state median ($3,501 against $2,036). Over a year that is 21.1% of the median household income. US housing guidance treats housing as affordable when it takes 30% of income or less, so the typical household is under that line. The median home value is $1,838,200, which is 9.2 times the median household income ($199,143); a ratio above 5 usually means buying is out of reach without savings or a second income. 50.8% of households own their home, 9% below the state average (50.8% against 55.9%).
The San Francisco-Oakland-Fremont, CA metropolitan area has 2,373,920 jobs in the BLS wage survey, and the median pay across all occupations is $74,260 a year, 46% above the national median ($74,260 against $50,980). The biggest occupation groups are office and administrative support (226,320 jobs, median $62,120); management (223,100 jobs, median $176,340); business and financial operations (207,030 jobs, median $112,960). The area is most specialised in computer and mathematical (1.9 times) and life, physical, and social science (1.8 times), where the share of workers is well above the national share. The best-paying groups with at least 5,000 jobs are management ($176,340) and computer and mathematical ($167,770). In 2026M09 the unemployment rate of San Mateo County was 3.9%. 67.2% of residents aged 16 and over are in the labour force. The city lies in San Mateo County; its jobs, pay by industry and GDP are on the county page.
Among workers, 51.8% drive alone, 2.9% use public transit, 1.7% walk, 34.2% work from home. 20.6% of workers commute 45 minutes or more, 6% above the state average (20.6% against 19.4%). Remote work is more common than in the state as a whole, which widens the set of employers a resident can work for without moving.
73.8% of adults aged 25 and over hold a bachelor's degree or higher, 99% above the state share (73.8% against 37.1%). 49.5% of residents were born outside the United States, 83% above the state share (49.5% against 27.0%). The poverty rate is 4.1%, 66% below the state rate (4.1% against 12.0%).
The warmest month is Sep, averaging 61°F (16.0°C), and the coolest is Jan at 51°F (10.7°C). About 515 mm (20 inches) of precipitation falls in a year; Dec is the wettest month (115 mm) and Jul the driest (2 mm). These values come from NASA satellite-based climatology on a grid of about 50 km, so they describe the wider area, not a weather station in the city.
Closest cities in this guide: San Mateo (3 miles, rent 12% lower); Redwood City (4 miles, rent 15% lower); Belmont (4 miles, rent 18% lower); San Carlos (5 miles, rent 18% lower). Rent differences are against Foster City; use the Compare tab to put any two cities side by side.
Full guide to Foster City →California guideAll jobs in Foster City
These links go to official sources and open in a new window. The first one is the government's or company's own site as listed in Wikidata (property "official website"); check it before relying on it.
The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.
We could not match this title to one occupation, so here are the other sub-niches in Technology, where your skills may carry over:
Cybersecurity (760) Data, analytics and AI (3724) Cloud, IT and infrastructure (1161) Product management (935)
This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Technology jobs with distances from any of the 20 largest cities.
Replit is the employer in this listing. See all its open jobs here →
We do not hold headcount or revenue for this employer. Check its careers site and, if it is listed on a stock exchange, its public filings (SEC EDGAR search).
What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".
Replit · Foster City, CA · Software engineering · posted yesterday
Replit · Foster City, CA · Manufacturing and hardware engineering · posted 8 days ago
Replit · New York City, NY · Manufacturing and hardware engineering · posted 8 days ago
Replit · Foster City, CA · Executive and general management · posted 11 days ago
Etched · San Jose, CA · Software engineering · posted today
OpenAI · San Francisco, CA · Software engineering · posted today
OpenAI · San Francisco, CA · Software engineering · posted today
Crusoe · San Francisco, CA · Software engineering · posted yesterday
OpenAI · San Francisco, CA · Software engineering · posted yesterday
Commure · Mountain View, CA · Software engineering · posted yesterday
Zoox · Foster City, CA · Software engineering · posted yesterday
Zoox · Foster City, CA · Software engineering · posted yesterday
Zoox · Foster City, CA · Design and UX · posted yesterday
Replit · Foster City, CA · Software engineering · posted yesterday
Zoox · Foster City, CA · Business operations and strategy · posted 3 days ago
All Software engineering jobs → · All Technology sub-niches →
A private-sector role in technology (software engineering) listed today. The full description is on this page and on the employer's page.
Foster City, CA. A remote or flexible location is listed; confirm with the employer which states are accepted.
Use the "View this job and apply on the employer's page" button. AtiveSite does not receive applications.
The listing does not publish pay, and we could not match the title to one official occupation.
Median rent in Foster City is $3,501 a month and median household income $199,143 (ACS 2020–2024).
It was posted on 2026-11-10 (today). Jobs older than 90 days are not shown.
Yes: browse software engineering jobs in California.
AtiveSite is not affiliated with or endorsed by the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.