Cloud Security Lead

About the role

Replit is looking for a Cloud Security Lead to shape and own the cloud and infrastructure security program across GCP, AWS, and Azure. You will protect millions of developers, enable safe AI‑assisted development, and ensure the platform can be trusted in enterprise environments.

Key responsibilities

• Lead configuration hardening and CSPM platform optimization across multi‑cloud environments.
• Secure SaaS platforms, manage infrastructure vulnerability across cloud, containers, and registries.
• Enhance security for containerized and Kubernetes workloads (GKE/EKS/AKS) with runtime protections and network policies.
• Partner with engineering teams to embed security into CI/CD pipelines and cloud‑native deployments.
• Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure.
• Support incident investigations as the cloud security subject‑matter expert.

Required profile

• 7+ years of cloud engineering experience, including 3+ years in a senior or lead role.
• Hands‑on experience with CSPM tools such as Wiz, Lacework, Prisma, Orca, or SCC.
• Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging).
• Operational experience with vulnerability management across cloud and container environments.
• Working knowledge of AWS and/or Azure security services.

Required skills

• GCP, AWS, Azure security services
• CSPM tools (Wiz, Lacework, Prisma, Orca, SCC)
• Kubernetes security (GKE, EKS, AKS)
• Infrastructure as Code security (Terraform, Pulumi)
• Python scripting
• Compliance standards (SOC 2, ISO 27001, PCI DSS)

What we offer

• Competitive salary and equity
• 401(k) with 4% match (US only)
• Health, dental, vision, and life insurance
• Short and long‑term disability
• Paid parental, medical, and caregiver leave
• Flexible time off + holidays
• Commuter benefits, wellness stipend, and office amenities