Teams at Replit

Lead and operate a substantive third-party risk management program: evaluate SOC 2, pen tests, and architectures; review and redline security contract terms with Legal; maintain vendor/AI risk registers; enable customer trust for Sales; and build continuous monitoring and scalable vendor review capabilities.

Lead and scale a global 24/7 SOC: own SIEM and telemetry, build detections, run triage and investigations across multi-cloud, Kubernetes, endpoints, SaaS, and AI workloads; evaluate and integrate AI-native SOC tooling and automate response.

Own and run the end-to-end certification and audit program (SOC 2, ISO 27001, future ISO 42001), maintain the master security risk register, build continuous compliance monitoring, manage external auditors, author ISMS/SSP artifacts, drive remediation of findings, and partner with engineering and legal on privacy and evidence automation.