3 months ago
Base Salary
$210k - $270k/yr
Responsibilities
- Perform continuous security scanning across cloud posture and workloads, validating and prioritizing vulnerabilities and misconfigurations using CVSS, exploitability, and network exposure.
- Own and optimize CSPM, KSPM, and DSPM tooling to maintain compliance, prevent data leakage, and enforce hardened baselines.
- Configure and integrate automated IaC security scanning into CI/CD pipelines to identify risks before production deployment.
- Manage vulnerability scanning for container images, registries, and virtual machines while partnering with SRE and Platform teams on automated patching and rolling upgrades.
- Track infrastructure vulnerabilities against compliance SLAs and maintain audit-ready remediation and exception evidence.
- Report critical production exposures to the CISO and senior leadership and maintain infrastructure risk and cloud compliance dashboards.
- Partner with SRE, DevOps, and Platform teams on remediation and modify cloud configuration templates when needed.
- Support incident response during cloud or host-level breaches by implementing real-time cloud, network, or IAM countermeasures.
Requirements
- Five years of experience in Cloud Security, DevSecOps, or Systems Engineering roles.
- Strong experience with multi-cloud environments, with deep GCP expertise preferred and working knowledge of AWS or Azure.
- Hands-on experience with infrastructure security and posture-management platforms such as Wiz, Orca, Prisma Cloud, Lacework, or GCP Security Command Center.
- Strong proficiency with Terraform or Pulumi and GitOps deployment workflows.
- Ability to evaluate and configure IaC scanners such as Checkov, Tfsec, or KICS.
- Deep understanding of Docker and Kubernetes architectures, including GKE, EKS, runtime security, network policies, and workload identity.
- Understanding of SOC 2, ISO 27001, CIS Benchmarks, and NIST compliance frameworks.
- Ability to lead technical initiatives autonomously and influence cross-functional teams through technical expertise.
Benefits
- Full-time employee role based in the Foster City, California office with in-office work required Monday, Wednesday, and Friday.
- 401(k) program with a 4% match for US employees.
- Health, dental, vision, life, short-term disability, and long-term disability insurance.
- Paid parental, medical, and caregiver leave.
- Flexible time off and holidays.
- Commuter benefits, monthly wellness stipend, in-office setup reimbursement, quarterly team gatherings, and in-office amenities.
Categories
About Replit
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide and over 500,000 business users, Replit is democratizing software development by removing traditional barriers to application creation.