Security Engineer – Vulnerability Management (Infrastructure)

About the role

Replit is looking for a mid‑level Infrastructure Vulnerability Management Engineer with strong Cloud Security, DevSecOps, and IaC experience. You will bridge security, compliance, DevOps and Platform teams, securing multi‑cloud environments and managing continuous vulnerability lifecycles.

Key responsibilities

• Perform continuous security scanning across cloud workloads, triage and prioritize flaws using CVSS, exploitability and exposure criteria.
• Own Cloud, Kubernetes and Data Security Posture Management tools to maintain compliance and hardened baselines.
• Integrate automated IaC security scanning (e.g., Checkov, Tfsec, KICS) into CI/CD pipelines.
• Manage vulnerability scanning for container images, registries and VMs, building automated patching pipelines with SRE and Platform teams.
• Track and document infrastructure vulnerabilities to meet SOC 2, ISO 27001, PCI‑DSS SLAs and maintain audit‑ready evidence.
• Escalate critical exposures to CISO and senior leadership, maintaining dashboards and alerting mechanisms.
• Partner with SRE, DevOps and Platform teams to provide remediation guidance and modify cloud configuration templates as needed.
• Support Incident Response with real‑time cloud, network or IAM countermeasures during breaches.

Required profile

• 5+ years in Cloud Security, DevSecOps or Systems Engineering.
• Deep experience with multi‑cloud environments, especially GCP; working knowledge of AWS or Azure.
• Hands‑on with modern security platforms such as Wiz, Orca, Prisma Cloud, Lacework or GCP Security Command Center.
• Strong proficiency in IaC tools (Terraform, Pulumi) and GitOps workflows.
• Expertise in Docker, Kubernetes (GKE, EKS) security, runtime protection and network policies.
• Understanding of compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks, NIST).

Required skills

• GCP, AWS, Azure
• Wiz, Orca, Prisma Cloud, Lacework, GCP Security Command Center
• Terraform, Pulumi
• Checkov, Tfsec, KICS
• Docker, Kubernetes, GKE, EKS

What we offer

• Competitive salary and equity
• 401(k) with 4% match (US only)
• Health, dental, vision and life insurance
• Short‑ and long‑term disability
• Paid parental, medical and caregiver leave
• Flexible time off + holidays
• Commuter benefits, wellness stipend and office amenities
• Quarterly team gatherings and autonomous work environment