Cloud Security Lead
Hybrid (Foster City, CA)$250k - $325kFull-timePosted 10mo ago
About the role
Cloud Security Lead at Replit responsible for shaping and executing the cloud and infrastructure security program across GCP (primary) with AWS and Azure, containers, SaaS platforms, and multi-tenant AI infrastructure; partners with multiple teams to implement secure-by-default development practices and strong posture management.
Responsibilities
- Lead configuration hardening across GCP with oversight of workloads in AWS and Azure
- Own and optimize CSPM platforms across multi-cloud environments—establish baselines, guardrails, and remediation workflows
- Secure critical SaaS platforms, ensuring proper configurations and access controls
- Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services
- Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity
- Assess secure logging configurations across cloud/SaaS providers, ensuring audit logs, retention, and routing meet monitoring and architecture needs
- Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments
- Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure
- Participate in communicating security advisories, best practices, and updates to Replit’s customers
- Support incident investigations as a cloud security subject-matter expert
Qualifications
- 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role
- Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.)
- Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging)
- Experience securing and governing SaaS platforms and identity integrations
- Operational experience with infrastructure vulnerability management across cloud and container environments
- Working knowledge of AWS and/or Azure security services and configurations
- Experience with container and Kubernetes security across GKE, EKS, or AKS
- Strong IaC security experience with Terraform, Pulumi, or similar tooling
- Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS)
Skills
Required:Cloud security leadershipCSPM toolsGCP securitySaaS securityVulnerability managementKubernetes securityIaC security
Nice to have:Compliance knowledge
Benefits
- Competitive Salary & Equity
- 401(k) Program with a 4% match (US Only)
- Health, Dental, Vision and Life Insurance
- Short Term and Long Term Disability
- Paid Parental, Medical, Caregiver Leave
- Flexible Time Off (FTO) + Holidays
- Commuter Benefits (In-Office & US Only)
- Monthly Wellness Stipend
- Autonomous Work Environment
- In Office Set-Up Reimbursement (In-Office Only)
- Quarterly Team Gatherings
- In Office Amenities (In-Office Only)
Last updated Oct 7, 2026. Interested? Apply on the company site.
About Replit
Build apps and sites with AI
Replit is an AI-powered platform for building professional web apps and websites.
AIIDEagentai-plg-top-20brex-fastest-growing-2025buildcodecollaborate
More open roles at Replit
- Data Scientist, Growth1w agoHybrid (Foster City, CA) · Engineering
- Support Specialist1w agoHybrid (Foster City, CA) · User Operations
- Software Engineering Intern – Winter 20271w agoHybrid (Foster City, CA) · Engineering
- Head of Corporate Development2w agoHybrid (Foster City, CA) · G&A
- Security Engineer - Incident Response2w agoHybrid (Foster City, CA) · Engineering