Full-time mid-level role based in Foster City, CA (in-office Mon/Wed/Fri). The engineer will manage continuous infrastructure vulnerability lifecycles across multi-cloud environments, operate CSPM/KSPM/DSPM tooling, embed IaC security into CI/CD, support incident response, and track remediation to meet compliance requirements (e.g., SOC 2, ISO 27001, PCI-DSS).

Experienced engineer (8+ years) to design and operate LLM-based guardrails and detection systems, automate enforcement and response, analyze abuse patterns (BigQuery/Hex), and integrate security tooling in CI. Role is full-time based in Foster City, CA with an in-office requirement three days per week.

Senior engineering role on the Risk team focused on designing and operating abuse detection systems (phishing, cryptomining, account takeover, fraud) using LLMs and traditional techniques. Responsibilities include building LLM guardrails, ML/LLM classifiers, integrating security scanners in CI, analyzing data (BigQuery/Hex), and owning detection-to-enforcement workflows across Security, Support, and Legal. In-office in Foster City, CA with a 3-days-per-week on-site requirement.

Replit is hiring a Staff Software Engineer for Trust & Safety to design and operate AI-powered abuse detection systems and automated responses for threats such as phishing, cryptomining, account takeover, and financial fraud. The role requires owning detection and enforcement end-to-end, building LLM guardrails, analyzing large-scale data (BigQuery/Hex), integrating security scanners in CI, and collaborating with Support and Legal. Requires 8+ years in security engineering/anti-abuse/fraud detection and strong skills in Python or TypeScript, SQL, and ML/LLM-based classifiers. Location: Foster City, CA (full-time, hybrid with specified in-office days).

Full-time Senior Software Engineer on Replit's Fraud team (based in Foster City, CA; in-office M/W/F). Own end-to-end abuse detection and response: design and implement LLM-based guardrails and classifiers, build AI-powered detection systems, integrate security scanners into CI, and automate enforcement. Requires 4+ years in security/anti-abuse/fraud, strong Python/TypeScript skills, and experience with SQL and ML/LLM classifiers.

Replit is hiring a Senior Software Engineer for the Risk team to design and operate AI-powered abuse detection and automated response systems (phishing, cryptomining, account takeover, fraud) and build LLM guardrails. The role requires 4+ years in security engineering/anti-abuse, strong Python/TypeScript skills, experience with SQL and large-scale data analysis (e.g. BigQuery), and familiarity with ML/LLM classifiers and LLM-specific attack vectors. This is a full-time, primarily on-site role in Foster City, CA (in-office Monday, Wednesday, Friday).

Work on adversarial, AI-native trust & safety problems: design LLM guardrails, build ML/LLM-based detectors for phishing, cryptomining, account takeover and fraud, integrate security scanners into CI, operate detection tooling, and own the full abuse response lifecycle. Requires 4+ years in security engineering/anti-abuse/fraud detection and strong Python or TypeScript skills, SQL and large-scale data analysis experience.

Replit is hiring an Engineering Manager to create and lead a 0-to-1 Anti-Abuse team focused on defending the platform from phishing, cryptomining, token farming, payment fraud and AI-driven abuse. Responsibilities include defining threat models and metrics, designing progressive verification/KYC-oriented identity infrastructure, shipping detection and enforcement systems, building data pipelines and dashboards, and hiring and growing a small engineering and analytics team. Requires ~6+ years engineering experience with 2+ years managing teams and experience in abuse/fraud/trust-orientated systems.

Provide advanced onsite and remote technical support in a primarily Apple macOS environment, troubleshoot complex hardware/software/authentication/connectivity issues, support Google Workspace/Slack and conferencing systems, manage device enrollment/patching/software deployment via MDM (e.g., Kandji), assist with IAM (MFA/SSO) and incident response, document runbooks in the ITSM platform, and mentor Tier 1 staff. Role requires 4+ years of relevant IT/helpdesk experience and presence onsite in Foster City (minimum four days/week).

Replit is hiring a mid-level AppSec Vulnerability Management Engineer to bridge security, compliance, and engineering. Responsibilities include periodic application scanning and triage, maintaining SBOMs and maturing supply-chain posture (SLSA), tracking vulnerabilities to meet compliance SLAs (SOC 2, ISO 27001, PCI-DSS), integrating and tuning SAST/SCA/secret-scanning tooling in CI/CD, collaborating on remediation (including direct code patching), and supporting incident response. Role is full-time, based in Foster City, CA with an in-office requirement Monday, Wednesday, Friday. Approximately 5 years of relevant experience required.

Join Replit's SRE team to design observability and monitoring solutions, drive infrastructure automation and IaC (Terraform/Ansible/Pulumi), define SLOs/SLIs, lead incident response and post-mortems, and optimize performance and capacity. Role expects 4-8 years SRE/DevOps/Infrastructure experience and strong skills with Kubernetes, cloud-native technologies, monitoring platforms, and automation using Python or Go.

Join Replit's SRE team to design and implement observability, define SLOs/SLIs, lead incident response, automate operations and performance-tune large-scale Kubernetes deployments on cloud platforms. The role requires 8+ years in SRE or similar, deep distributed-systems experience, strong coding skills in Python or Go, and experience with IaC tools (Terraform/Pulumi) and monitoring platforms.

Replit is hiring a Data Scientist, People to build models, AI agents, and tooling for hiring, compensation, performance, organizational design, and workforce planning. The role focuses on predictive modeling, LLM-driven analytics, and connecting people systems (e.g., Ashby) into live decision systems. Requires minimum 6 years' experience, strong SQL and Python, and experience with People/workforce analytics; based in Foster City, CA with an in-office requirement Monday/Wednesday/Friday.

Full-time, in-office (Mon/Wed/Fri) GRC Engineer role responsible for technical ownership of Replit’s GRC program, driving compliance-as-code and automation, managing SOC 2/ISO 27001 and other regulatory requirements, operating the cybersecurity risk register, and partnering with engineering, legal, sales, and external auditors. Requires 8+ years of GRC or information security experience.

Full-time Product Security Architect at Replit responsible for defining and enforcing secure product architecture, leading security implementation of features, conducting threat modeling, specifying authentication/authorization (mTLS/OIDC/OAuth/SAML), performing code reviews (Python/Go/JavaScript), and maintaining the authoritative secure architecture documentation. Requires 8+ years of product security engineering/architecture experience with multi-tenant SaaS.

Zero-to-one engineering role owning technical relationships and end-to-end integrations with billing platforms, payment processors, tax/compliance vendors, KYC/risk providers and agentic-commerce protocols. Requires 6+ years of software engineering experience with strong backend expertise, production integration experience, and skills in observability, reconciliation, and system design. Tech stack examples: TypeScript, Node.js, Postgres, GraphQL, React.

Provide first-line (Tier 1) onsite technical support for end users in a primarily Apple macOS environment at Replit's SoHo NYC office. Responsibilities include troubleshooting MacBook hardware/software, Google Workspace and Slack support, conference room AV maintenance, onboarding/offboarding, endpoint management using MDM (Kandji preferred), and documenting incidents in an ITSM platform. Requires 1+ years of IT support experience and willingness to work onsite at least four days per week.

Senior engineer role owning end-to-end abuse detection and response: design and implement LLM guardrails, build AI-powered classifiers and automated enforcement, integrate/tune security scanners in CI, and analyze abuse patterns using BigQuery/Hex. Requires 8+ years in security engineering/anti-abuse/fraud detection and experience with Python/TypeScript, SQL at scale, ML/LLM classifiers, and familiarity with common attack vectors.

Ownership of Replit's developer experience: maintain and evolve a TypeScript monorepo, Go services, and npm packages; optimize build and test pipelines to reduce iteration time; enforce code quality with linters/formatters and custom rules; drive type-safe code generation across service boundaries (GraphQL, protobufs, gRPC, OpenAPI); streamline developer onboarding and deployment processes; partner with the internal AI team to improve agent-generated PRs and manage internal and external dependencies. Required: strong proficiency in TypeScript and/or Go and/or Nix, modern build systems, linters/formatters, testing frameworks, and experience with monorepos or large-scale codebases.

Replit is hiring an Enterprise Account Executive based in the London area (role begins remote, plans to transition to hybrid). This full-time role focuses on full-cycle enterprise sales for a developer tools / AI platform: prospecting, product demonstrations, negotiating and closing deals, onboarding and expanding accounts, and maintaining CRM (HubSpot). Required: experience in AE or technical sales, strong communication and presentation skills, CRM proficiency, and a technical interest or coding knowledge. Travel up to 25%.