Product Security Architect

Replit

Product Security Architect serving as the expert for Replit’s secure product blueprint. Leading security initiatives in multi-tenant SaaS environment.

Posted 5/13/2026full-timeFoster City • California • 🇺🇸 United StatesSeniorLead💰 $250,000 - $380,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber SecurityGoJavaScriptPython

About the role

Key responsibilities & impact

Product Security Strategy & Mentorship
Security Mentorship: Serve as the primary security mentor and subject matter expert for engineering teams, fostering a culture of technical excellence and rigorous security design.
Product Vision: Define the product security vision, ensuring consistency across complex application architecture projects.
Project Execution: Lead the security implementation of new product features from initial design to final production deployment.
Threat Modeling: Conduct proactive threat modeling for new product features and major architectural changes.
Application Security Design: Define and enforce best practices around application security, including audit/application logging, configuration, tenant separation, encryption, customer BYOK, RBAC design, API design, and Session/cookie/token management.
Identity & Access: Define and implement secure Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) for multi-tenant SaaS products.
Third-Party Risk: Assess and mitigate risks associated with application third-party integrations such as payment, AI models, code repositories, etc.
Code Review: Apply a strong programming background (Python/Go/JavaScript) to perform hands-on code reviews when needed to validate security controls.
Risk Management & Cross-Functional Enablement: Maintain the Source of Truth, Contribution to Risk Register, Security Team Support, Compliance & Documentation, GTM & Sales Support.

Requirements

What you’ll need

8+ years of experience in product security engineering or architecture, specifically with Multi-tenant SaaS products.
Experience with AI Agent-based Saas products is a plus.
Deep expertise in common product security practices (e.g., tenant separation, RBAC, BYOK, secure API design, session/token management).
Expertise in Authentication/Authorization protocols (mTLS/OIDC/OAuth/SAML) in a multi-tenant SaaS environment.
Strong programming background (Python/Go/JavaScript) with proven ability to conduct code review.
Experience writing and maintaining Architecture documents.
Exceptional ability to communicate technical risk to both engineering and executive audiences.
Strong track record of contributing to Cybersecurity Risk Register.

Benefits

Comp & perks

Competitive Salary & Equity
401(k) Program with a 4% match
Health, Dental, Vision and Life Insurance
Short Term and Long Term Disability
Paid Parental, Medical, Caregiver Leave
Commuter Benefits
Monthly Wellness Stipend
Autonomous Work Environment
In Office Set-Up Reimbursement
Flexible Time Off (FTO) + Holidays
Quarterly Team Gatherings
In Office Amenities