Replit

SaaS

ProductSecurityArchitect

$250–380k Foster City, California, United States FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Senior candidates.

The Brief

“Product Security Architect at Replit. Skills: Product security architecture, Multi-tenant SaaS security, Application security design, Authentication/Authorization protocols. Serve as the subject matter expert for Replit’s secure product blueprint. Define and implement the application security architecture for our multi-tenant SaaS platform”

What You'll Achieve.

Ensuring our platform is resilient and secure by design; Driving outcomes with minimal oversight

Industry & Context.

SaaS
Problems you'll solve

Problem-Solving Mindset; Breaking down complex security challenges into elegant, scalable engineering solutions

Eligibility Requirements

In-office requirement of Monday, Wednesday, and Friday

What They're Looking For.

Must Have

8+ years of experience in product security engineering or architecture, specifically with Multi-tenant SaaS products, Deep expertise in common product security practices (e. g. , tenant separation, RBAC, BYOK, secure API design, session/token management), Expertise in Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) in a multi-tenant SaaS environment, programming background (Python/Go/JavaScript) with proven ability to conduct code review, Experience writing and maintaining Architecture documents, Exceptional ability to communicate technical risk to both engineering and executive audiences, track record of contributing to Cybersecurity Risk Register

Nice to Have

Experience with AI Agent-based Saas products is a plus

What You'll Do.

Serve as the subject matter expert for Replit’s secure product blueprint

Define and implement the application security architecture for our multi-tenant SaaS platform

Ensure platform resilience and security by design

Lead high-impact security initiatives

Provide deep subject matter expertise to engineering organization and executive leadership

Serve as the primary security mentor and subject matter expert for engineering teams

Define the product security vision

Lead the security implementation of new product features

Conduct proactive threat modeling for new product features and major architectural changes

Define and enforce best practices around application security

Define and implement secure Authentication/Authorization protocols for multi-tenant SaaS products

Assess and mitigate risks associated with application third-party integrations

Apply a programming background to perform hands-on code reviews

Define and maintain the authoritative “Source of Truth” for Replit’s secure architecture

and quantify architectural security risks

Ensure risks are accurately reflected in the Cybersecurity Risk Register

Support other security teams like GRC

Vulnerability Management

Partner with GRC teams to translate complex architectural designs into clear

audit-ready documentation and control frameworks

Act as the technical bridge for the Sales team

addressing complex security inquiries from enterprise customers

How You'll Work.

Team & Collaboration

Provide deep subject matter expertise to both the engineering organization and executive leadership; Serve as the primary security mentor and subject matter expert for engineering teams; Support other security teams like GRC, Pentesting, Vulnerability Management, and PSIRT; Partner with GRC teams; Act as the technical bridge for the Sales team

Communication Scope

Exceptional ability to communicate technical risk to both engineering and executive audiences

Process & Methodology

Lead the security implementation of new product features from initial design to final production deployment, Lead high-impact security initiatives

Full Job Description

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are looking for a Product Security Architect to serve as the subject matter expert for Replit’s secure product blueprint. In this critical role, you will define and implement the application security architecture for our multi-tenant SaaS platform, ensuring our platform is resilient and secure by design. You will be a key technical contributor—leading high-impact security initiatives and providing deep subject matter expertise to both the engineering organization and executive leadership. WHAT YOU'LL DO PRODUCT SECURITY STRATEGY & MENTORSHIP - Security Mentorship: Serve as the primary security mentor and subject matter expert for engineering teams, fostering a culture of technical excellence and rigorous security design. - Product Vision: Define the product security vision, ensuring consistency across complex application architecture projects. - Project Execution: Lead the security implementation of new product features from initial design to final production deployment. - Threat Modeling: Conduct proactive threat modeling for new product features and major architectural changes. - Application Security Design: Define and enforce best practices around application security, including audit/application logging, configuration, tenant separation, encryption, customer BYOK, RBAC design, API design, and Session/cookie/token management. - Identity & Access: Define and implement secure Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) for multi-tenant SaaS products. - Third-Party Risk: Assess and mitigate risks associated with application third-party integrations such as payment, AI models, code repositories, etc. - Code Review: Apply a strong programming background (Python/Go/JavaScript) to perfor

Free ATS check

Applying for this Product Security Architect role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Ashby

  • Ashby is a fast modern ATS — most applications take under 3 minutes.
  • The resume parser is strong; verify parsed experience dates and job titles.
  • Custom screening questions are often scored algorithmically — answer completely.
  • Location field affects geo-based screening; use your actual metro area.

ANONYMOUS · UNFILTERED

What do employees actually say about Replit?

Real rants from real employees. Read before you apply.

Read Company Rants →