11 hours ago
Base Salary
$250k - $325k/yr
Responsibilities
- Lead cloud configuration hardening across GCP and oversee workloads and integrations in AWS and Azure.
- Own and optimize CSPM platforms by establishing configuration baselines, guardrails, and remediation workflows.
- Secure SaaS platforms through proper configuration, access controls, and engineering integrations.
- Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services.
- Enhance security for containerized and Kubernetes workloads, including runtime protections, network policies, and workload identity.
- Assess cloud and SaaS logging configurations, including audit logs, retention, and routing.
- Partner with engineering teams to embed secure-by-default practices into development workflows and cloud-native deployments.
- Collaborate with security monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure teams.
- Support incident investigations as a cloud security subject-matter expert and communicate security advisories and best practices to customers.
Requirements
- 7+ years of experience in cloud engineering, including 3+ years in a senior or lead role.
- Hands-on experience with CSPM tools such as Wiz, Lacework, Prisma, Orca, or SCC.
- Deep expertise in GCP security, including IAM, VPC, KMS, GKE, and Cloud Logging.
- Experience securing and governing SaaS platforms and identity integrations.
- Operational experience with infrastructure vulnerability management across cloud and container environments.
- Working knowledge of AWS and/or Azure security services and configurations.
- Experience with container and Kubernetes security across GKE, EKS, or AKS.
- Strong infrastructure-as-code security experience with Terraform, Pulumi, or similar tooling.
- Familiarity with SOC 2, ISO 27001, and PCI DSS compliance standards.
- Experience supporting secure-first cloud-native or PaaS environments and securing AI/ML pipelines, model-serving infrastructure, developer platforms, AI/agentic systems, or sensitive data pipelines is preferred.
- Automation or scripting experience with Python and relevant cloud security certifications are preferred.
Benefits
- Full-time role based in the Foster City, California office with in-office work required Monday, Wednesday, and Friday.
- Competitive salary and equity.
- 401(k) program with a 4% match for US employees.
- Health, dental, vision, and life insurance.
- Short-term and long-term disability coverage.
- Paid parental, medical, and caregiver leave.
- Flexible time off and holidays.
- Commuter benefits for in-office US employees.
- Monthly wellness stipend.
- Autonomous work environment.
- In-office setup reimbursement.
- Quarterly team gatherings and in-office amenities.
Categories
About Replit
Replit builds a browser-based software development platform with an AI coding agent, collaborative IDE, and built-in deployment for individuals, teams, and businesses. It offers freemium and paid plans for developers and organizations, plus hosting and enterprise features used to create and run web applications. Founded in 2016 and headquartered in Foster City, California, Replit is privately held and serves a global user base.