← All roles

Security Engineer - Vuln Management (Infra)

Replit· Engineering
Apply on company site
Hybrid (Foster City, CA)$210k - $270k + equityFull-timePosted 4mo ago

About the role

Mid-level Infrastructure Vulnerability Management Engineer focused on Cloud Security, DevSecOps, and IaC. Bridges security, compliance, DevOps, and Platform engineering to identify misconfigurations, manage vulnerability lifecycles across multi-cloud environments, containers, and data repositories, and participate in incident response.

Responsibilities

  • Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure.
  • Posture Management & Visibility: Own and optimize CSPM, KSPM, and DSPM tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines.
  • Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks before production.
  • Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and VMs; partner with SRE and Platform teams to automate base-image patching and rolling upgrades.
  • Compliance-Driven Tracking: Track, document, and manage infrastructure vulnerabilities per strict SLAs (SOC 2, ISO 27001, PCI-DSS); maintain audit-ready remediation evidence.
  • Executive Reporting & Alerting: Escalate critical production exposures to CISO and leadership; maintain dashboards and alerts on infrastructure risk trends and cloud compliance.
  • Remediation Collaboration: Work with SRE, DevOps, and Platform teams to provide mitigation paths; assist in modifying cloud configuration templates to resolve security flaws.
  • Incident Response Support: Assist Incident Response teams during active breaches; help implement real-time cloud, network, or IAM countermeasures.

Qualifications

  • 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles.
  • Strong foundational experience with multi-cloud environments (deep GCP expertise preferred; working knowledge of AWS or Azure).
  • Hands-on experience with posture management and scanning tools (e.g., Wiz, Orca, Prisma Cloud, Lacework, or GCP Security Command Center).
  • Proficiency with Terraform, Pulumi, GitOps; ability to evaluate/configure IaC scanners like Checkov, Tfsec, or KICS.
  • Deep understanding of Docker/container security and Kubernetes architectures (GKE, EKS); runtime security, network policies, workload identity.
  • Understanding of security compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks, NIST) and how configurations map to them.

Skills

Required:Cloud SecurityCloud Infrastructure (multi-cloud)Posture Management & Scanning ToolsIaC & AutomationContainer & Kubernetes SecurityCompliance Awareness

Benefits

  • Competitive Salary & Equity
  • 401(k) with 4% match (US Only)
  • Health, Dental, Vision and Life Insurance
  • Short Term and Long Term Disability
  • Paid Parental, Medical, Caregiver Leave
  • Flexible Time Off (FTO) + Holidays
  • Commuter Benefits (In-Office & US Only)
  • Monthly Wellness Stipend
  • Autonomous Work Environment
  • In Office Set-Up Reimbursement (In-Office Only)
  • Quarterly Team Gatherings
  • In Office Amenities (In-Office Only)
Last updated Sep 2, 2026. Interested? Apply on the company site.
Replit logo

About Replit

Build apps and sites with AI

Replit is an AI-powered platform for building professional web apps and websites.

AIIDEagentai-plg-top-20brex-fastest-growing-2025buildcodecollaborate
Company profileWebsite

More open roles at Replit