Replit
Security Engineer - Vuln Management (Infra)
$210K–$270K
Foster City, CA · Hybrid · Full-time · Posted May 26, 2026
- Experience
- 5 years
About the job
Secures Replit’s cloud infrastructure by managing vulnerability scanning and remediation, strengthening cloud and container posture, and supporting infrastructure incident response and compliance.
What you'll do
- Scan, validate, prioritize, and track infrastructure vulnerabilities and misconfigurations across cloud workloads, containers, and data repositories.
- Manage CSPM, KSPM, DSPM, and IaC security tooling; collaborate with engineering teams on remediation and automated patching.
- Support cloud and host-level incident response by implementing real-time cloud, network, or IAM countermeasures.
What they ask for
- 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles.
- Experience with multi-cloud environments; working knowledge of AWS or Azure.
- Proficiency with Terraform or Pulumi, GitOps workflows, and IaC scanners such as Checkov, Tfsec, or KICS.
- Understanding of Docker and Kubernetes security, including runtime security, network policies, and workload identity.
Nice to have
- Deep GCP expertise.
- Hands-on experience with Wiz, Orca, Prisma Cloud, Lacework, or GCP Security Command Center.
Pay
$210K – $270K USD base salary
Tools
GCP, AWS, Azure, Wiz, Terraform, Pulumi, Checkov, Kubernetes
Model-written summary · the original posting is authoritative