Replit
Security Engineer - Incident Response
$230K–$360K
Foster City, CA · Hybrid · Full-time · Posted Oct 5, 2026
- Experience
- No specific number of years stated.
About the job
Leads security incident response and investigations, builds response automation, and improves detections and platform security for Replit’s cloud-native platform.
What you'll do
- Lead security incidents through containment, recovery, and post-incident review; coordinate response and communicate status to stakeholders.
- Investigate activity across cloud infrastructure, containers, identity systems, and applications to determine scope and root cause.
- Build response scripts and tools, maintain playbooks, and improve detections, logging, and readiness.
What they ask for
- Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment.
- Hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis.
- Proficiency writing production-quality scripts or tools in Python, Go, or Bash.
- Knowledge of cloud security, especially Google Cloud Platform; working knowledge of Kubernetes and containers.
Nice to have
- Experience building or operating SOAR or other response automation platforms.
- Digital forensics experience with cloud, Linux hosts, or containers.
Pay
$230K – $360K (base salary; currency not stated)
Tools
Python, Go, Bash, Google Cloud Platform, GKE, Kubernetes, SIEM, SOAR
AI focus
Defends a cloud-native AI software creation platform; the role also values experience in AI/ML-driven environments.
Model-written summary · the original posting is authoritative