Replit Visa Sponsorship Jobs USA
Replit is a cloud-based software development platform known for making coding accessible to developers worldwide. The company operates in the competitive Technology & Software space and has sponsored H-1B visas for technical talent, making it a relevant target for international engineers seeking U.S. work authorization.
See All Replit JobsOverview
Showing 5 of 26+ Replit Visa Sponsorship Jobs USA
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Replit Visa Sponsorship Jobs USA
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Replit Visa Sponsorship Jobs USA.
Get Access To All JobsINTRODUCTION
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
ABOUT THE ROLE
We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
This role requires strong technical ability to reproduce vulnerabilities, deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly.
WHAT YOU’LL DO
Vulnerability Intake, Triage & Validation
- Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels.
- Independently validate, reproduce, severity-score, and document findings.
- Identify duplicates and maintain a clean vulnerability records pipeline.
- Assess relevance and exploitability using OWASP, cloud misconfiguration patterns, and identity/authentication/authorization risks (Oauth, OIDC).
Remediation Coordination & SLA Management
- Work with Engineering, SecOps, IT, SRE, and Cloud Security to confirm product impact and drive remediation.
- Provide detailed reproduction steps, proof-of-concepts, and technical analyses.
- Track SLAs, remediation progress, regression testing, and systemic improvements.
- Support SOC 2, ISO 27001, and pentest evidence needs as part of vulnerability lifecycle governance.
Bug Bounty & Vulnerability Disclosure Program Management
- Design and evolve the bug bounty program, including scope, rules, and reward structures.
- Manage platform selection, private vs. public launches, and community engagement.
- Communicate clearly with researchers, provide clarifications, and handle feedback or disputes.
- Determine reward payouts, bonus decisions, and recognition for top contributors.
Coordinated Disclosure & CVE Management
- Lead the coordinated vulnerability disclosure process for internal and external findings.
- Negotiate disclosure timelines with researchers and partners.
- Coordinate CVE assignments and publications, and prepare customer/public advisories.
REQUIRED SKILLS
- Experience running or triaging for bug bounty programs (HackerOne ideally).
- Strong ability to triage, validate, and reproduce vulnerabilities independently.
- Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc.
- Familiarity with cloud platforms (GCP preferred) and SaaS architectures.
- Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals.
NICE TO HAVE
- Scripting or automation experience (Python, Go, Bash).
- Pentesting background or exposure to offensive security work.
- Familiarity with compliance frameworks such as SOC 2 and ISO 27001.
- Experience authoring public advisories or CVE writeups.
- Hands-on experience with SIEM, Cloud Logging, and investigative tooling.
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
FULL-TIME EMPLOYEE BENEFITS INCLUDE:
- Competitive Salary & Equity
- 401(k) Program with a 4% match
- Health, Dental, Vision and Life Insurance
- Short Term and Long Term Disability
- Paid Parental, Medical, Caregiver Leave
- Commuter Benefits
- Monthly Wellness Stipend
- Autonomous Work Environment
- In Office Set-Up Reimbursement
- Flexible Time Off (FTO) + Holidays
- Quarterly Team Gatherings
- In Office Amenities
COMPENSATION RANGE: $180K - $325K
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
INTRODUCTION
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
ABOUT THE ROLE
We are looking for a highly skilled PSIRT Engineer to lead the vulnerability response program for Replit’s cloud-native AI platform. You will own the lifecycle of security vulnerabilities affecting our products and services—from intake to validation, remediation coordination, and public disclosure.
This role requires strong technical ability to reproduce vulnerabilities, deep understanding of web/app/cloud exploit classes, and experience operating bug bounty and coordinated disclosure programs. You will work closely with Engineering, Cloud Security, SecOps, SRE, and IT teams to ensure vulnerabilities are fixed quickly and communicated responsibly.
WHAT YOU’LL DO
Vulnerability Intake, Triage & Validation
- Manage intake from bug bounty platforms (HackerOne preferred), customer reports, automated scanners, pentest reports, and coordinated disclosure channels.
- Independently validate, reproduce, severity-score, and document findings.
- Identify duplicates and maintain a clean vulnerability records pipeline.
- Assess relevance and exploitability using OWASP, cloud misconfiguration patterns, and identity/authentication/authorization risks (Oauth, OIDC).
Remediation Coordination & SLA Management
- Work with Engineering, SecOps, IT, SRE, and Cloud Security to confirm product impact and drive remediation.
- Provide detailed reproduction steps, proof-of-concepts, and technical analyses.
- Track SLAs, remediation progress, regression testing, and systemic improvements.
- Support SOC 2, ISO 27001, and pentest evidence needs as part of vulnerability lifecycle governance.
Bug Bounty & Vulnerability Disclosure Program Management
- Design and evolve the bug bounty program, including scope, rules, and reward structures.
- Manage platform selection, private vs. public launches, and community engagement.
- Communicate clearly with researchers, provide clarifications, and handle feedback or disputes.
- Determine reward payouts, bonus decisions, and recognition for top contributors.
Coordinated Disclosure & CVE Management
- Lead the coordinated vulnerability disclosure process for internal and external findings.
- Negotiate disclosure timelines with researchers and partners.
- Coordinate CVE assignments and publications, and prepare customer/public advisories.
REQUIRED SKILLS
- Experience running or triaging for bug bounty programs (HackerOne ideally).
- Strong ability to triage, validate, and reproduce vulnerabilities independently.
- Deep understanding of web/app/cloud vulnerability classes, OWASP Top 10, misconfigurations, authN/Z issues, etc.
- Familiarity with cloud platforms (GCP preferred) and SaaS architectures.
- Strong understanding of CI/CD workflows, code structure, and software engineering fundamentals.
NICE TO HAVE
- Scripting or automation experience (Python, Go, Bash).
- Pentesting background or exposure to offensive security work.
- Familiarity with compliance frameworks such as SOC 2 and ISO 27001.
- Experience authoring public advisories or CVE writeups.
- Hands-on experience with SIEM, Cloud Logging, and investigative tooling.
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
FULL-TIME EMPLOYEE BENEFITS INCLUDE:
- Competitive Salary & Equity
- 401(k) Program with a 4% match
- Health, Dental, Vision and Life Insurance
- Short Term and Long Term Disability
- Paid Parental, Medical, Caregiver Leave
- Commuter Benefits
- Monthly Wellness Stipend
- Autonomous Work Environment
- In Office Set-Up Reimbursement
- Flexible Time Off (FTO) + Holidays
- Quarterly Team Gatherings
- In Office Amenities
COMPENSATION RANGE: $180K - $325K
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Job Roles at Replit
See all Replit Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Replit roles.
Get Access To All JobsTips for Finding Replit Visa Sponsorship Jobs USA
Target engineering and product roles first
Replit's H-1B sponsorship history is concentrated in technical functions. Software engineers and product-focused roles align most closely with the company's core platform work, making them the strongest starting point for visa sponsorship candidates.
Understand Replit's product before applying
Replit builds a browser-based IDE and collaborative coding environment. Demonstrating familiarity with their developer tools, AI coding features, and infrastructure challenges will set your application apart in a competitive technical hiring process.
Prepare for a startup-style interview process
As a growth-stage technology company, Replit moves quickly in hiring. Expect a compact interview process with a strong emphasis on technical problem-solving, product thinking, and adaptability, qualities valued highly in fast-moving software companies.
Align your background with AI and developer tooling
Replit has invested heavily in AI-assisted development features. Candidates with experience in machine learning, language models, or developer experience tooling are particularly well-positioned given the company's current product direction and technical priorities.
Confirm sponsorship availability before applying
Sponsorship availability can shift with headcount and hiring cycles. When browsing open roles, use Migrate Mate to filter by verified sponsorship history so you're focused on positions where H-1B support is confirmed rather than assumed.
Highlight remote and async work experience
Replit operates with a distributed team structure common in modern software companies. Demonstrating experience in remote-first environments and async collaboration signals you can integrate smoothly into their engineering culture from day one.
Frequently Asked Questions
Does Replit sponsor H-1B visas?
Yes, Replit sponsors H-1B visas for qualifying roles. Their sponsorship activity is concentrated in technical positions, consistent with their focus as a software development platform. If you're an international candidate targeting Replit, engineering and technical product roles are your strongest entry points for H-1B sponsorship consideration.
What types of roles does Replit typically sponsor visas for?
Replit's visa sponsorship has historically supported technical roles, primarily software engineers and developers working on their core platform. Given the company's focus on cloud-based development tools and AI features, roles in backend engineering, infrastructure, and machine learning are the most likely to involve H-1B sponsorship.
How do I find open H-1B sponsored jobs at Replit?
Migrate Mate is the most reliable way to find Replit roles that include verified visa sponsorship. Rather than guessing from generic job postings, Migrate Mate surfaces positions from confirmed H-1B sponsors so you can filter directly by company and focus your applications where sponsorship is actually on the table.
What is the typical hiring timeline at Replit for sponsored roles?
As a growth-stage technology company, Replit tends to run a relatively fast interview process. Sponsored roles generally involve a technical screen, one or more coding assessments, and a final round. Once an offer is extended, the H-1B petition timeline depends on your current status, cap-subject candidates must account for the annual lottery in April.
How do I improve my chances of getting sponsored at Replit?
The most effective approach is aligning your experience directly with Replit's product priorities, particularly AI-assisted development, developer tooling, and cloud infrastructure. Strong technical fundamentals are table stakes. What differentiates candidates is genuine familiarity with their platform and the ability to contribute to a fast-moving, distributed engineering team from day one.