Security Architecture Lead
Replit
Security Architecture Lead at Replit is a full time role based in Remote · Foster City, California, USA (remote). The listing states pay of $295k–$450k. It was published on 10 February 2026 and was open at last check.
| Role | Security Architecture Lead |
|---|---|
| Company | Replit |
| Location | Remote · Foster City, California, USA (remote) |
| Employment type | Full Time |
| Pay (as listed) | $295k–$450k |
| Published | 10 February 2026 |
| Status | Open at last check |
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the Role
We are looking for a Security Architecture Lead to serve as the primary technical authority for Replit’s security blueprint. In this Technical Lead capacity, you will steer the architectural direction for a team of security architects and engineers, ensuring our platform is resilient and secure by design. You will be a "player-coach"—leading high-impact technical initiatives while providing deep subject matter expertise to both the engineering organization and executive leadership.
What You'll Do
Technical Leadership & Mentorship
- Architectural North Star: Act as the lead technical voice for security architecture, defining the long-term vision and ensuring consistency across complex infrastructure and product projects.
- Technical Mentorship: Provide high-level guidance and mentorship to security engineers, fostering a culture of technical excellence and rigorous security design without the overhead of administrative management.
- Project Steering: Lead cross-functional squads through complex security implementations, from initial design to final production deployment.
Architecture Strategy & Risk Management
- Maintain the Source of Truth: Define and maintain (document) the authoritative "Source of Truth" for Replit’s secure architecture, ensuring these patterns are consistently adopted across all engineering teams.
- Secure Bootstrapping & Isolation: Drive the design for secure bootstrapping and multi-layered trust. Enforce isolation principles at every level—from technical containerization and network segmentation to business logic and multi-tenant resource separation.
- Contribution to Risk Register: Actively identify, document, and quantify architectural security risks. You will be responsible for ensuring these are accurately reflected in the Cybersecurity Risk Register, translating technical debt into actionable risk profiles for executive stakeholders.
Security Design & Review
- Deep-Dive Reviews: Oversee and conduct deep-dive security reviews for core product features and infrastructure, identifying potential threats and mitigating risks early in the development lifecycle.
- Availability & Resilience: Own the architectural strategy for Availability, specifically defending against DoS threats to ensure a highly resilient platform.
Cross-Functional Enablement
- Compliance & Documentation: Partner with GRC teams to translate complex architectural designs into clear, audit-ready documentation and control frameworks. Evaluate required controls against architecture and assess readiness for future compliance certifications.
- GTM & Sales Support: Act as the technical bridge for the Sales team, addressing complex security inquiries from enterprise customers regarding Replit's architectural integrity.
Required Skills & Experience
- 8+ years of experience in security engineering or security architecture.
- Proven experience as a Technical Lead, steering large-scale projects and guiding the work of other senior engineers.
- Experience writing and maintaining Architecture documents.
- Deep expertise in cloud-native security architecture (GCP experience is a significant plus) for multi-tenant SaaS products.
- Experience designing secure boot, hardware/Cloud-KMS-rooted trust, and multi-layered defense systems.
- Strong understanding of isolation technologies and DDoS mitigation.
- Exceptional ability to communicate technical risk to both engineering and executive audiences.
- Strong track record of contributing to Cybersecurity Risk Register.
What We Value
- Systems Thinking: The ability to see the "big picture" and understand how security decisions impact the entire stack.
- Technical Influence: The ability to drive technical alignment across the organization through expertise and collaboration rather than direct authority.
- Autonomy: Comfortable leading major technical initiatives and driving outcomes with minimal oversight.
Problem-Solving Mindset: A passion for breaking down complex security challenges into elegant, scalable engineering solutions.
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
Interviewing + Culture at Replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Create your free OnJob profile to apply — we'll take you to Replit's application after sign-up. · Posted 10 Feb 2026.
Security Architecture Lead at Replit — questions answered
What does the Security Architecture Lead role at Replit pay?
The Security Architecture Lead at Replit listing states pay of $295k–$450k for the Remote · Foster City, California, USA (remote) position. That figure is taken directly from the employer's own posting as published, not estimated or averaged from other roles.
Is the Security Architecture Lead role at Replit remote?
Yes — Replit advertises this Security Architecture Lead role as remote, tied to Remote · Foster City, California, USA, and it is listed as full time work. Remote terms come from the employer's own posting, so confirm the expected working hours, timezone and any on-site days with Replit before you apply.
Is the Security Architecture Lead role at Replit still open?
The Security Architecture Lead posting at Replit was open at OnJob's last check of the employer's careers page, having been published on 10 February 2026. OnJob re-checks source listings on each build and marks a role closed once it disappears, but listings can close without notice, so the employer's own page is the final word.
How do you apply for the Security Architecture Lead role at Replit?
Apply to the Security Architecture Lead at Replit role through OnJob with a free profile: OnJob scores your fit against the listing, shows the skills lowering that score, and submits an ATS-ready profile to Replit's own application page. Creating a profile is free and needs no card.
Related jobs you can win
Hand-picked roles that match this listing on skills, category and location — each scored to your profile inside OnJob.
Explore more on OnJob
Hiring for a role like this?
Post a job on OnJob and reach AI-matched candidates.