Cloud Security Lead

What You’ll Do

Cloud Security Engineering

• Lead configuration hardening across GCP, with additional oversight of workloads and integrations running in AWS and Azure.
• Own and optimize CSPM platforms across multi-cloud environments-establishing configuration baselines, guardrails, and remediation workflows.
• Secure critical SaaS platforms, ensuring proper configurations, access controls, and engineering integrations.
• Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services.
• Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity.
• Assess secure logging configurations across cloud/SaaS providers, ensuring audit logs, retention, and routing meet monitoring and architecture needs.

Secure Development & Architecture Enablement

• Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments.

Cross-functional Responsibilities

• Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure.
• Participate in communicating security advisories, best practices, and updates to Replit’s customers.
• Support incident investigations as a cloud security subject-matter expert.

Required Skills & Experience

• 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role.
• Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.).
• Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging).
• Experience securing and governing SaaS platforms and identity integrations.
• Operational experience with infrastructure vulnerability management across cloud and container environments.
• Working knowledge of AWS and/or Azure security services and configurations.
• Experience with container and Kubernetes security across GKE, EKS, or AKS.
• Strong IaC security experience with Terraform, Pulumi, or similar tooling.
• Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS).

Preferred Qualifications

• Experience supporting engineering teams in building secure-first, cloud-native or PaaS environments.
• Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services.
• Experience in high-growth technology or cloud-native product companies.
• Experience with securing AI/agentic systems and sensitive data pipelines.
• Automation/scripting with Python.
• Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs).

What We Value

• Problem-solving mindset - Ability to break down complex security and operational challenges into clear engineering solutions.
• Autonomy - Comfortable leading initiatives, collaborating effectively, and driving outcomes with minimal oversight.
• Communication excellence - Able to translate deep technical concepts for engineers, executives, and enterprise customers.
• Continuous learning - Passion for staying current with AI security, cloud-native advances, and emerging threats.
• Automation-first approach - Belief in reducing operational toil and building scalable, self-healing systems.

Additional information

This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.

Full-Time Employee Benefits Include

• Competitive Salary & Equity
• 401(k) Program with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays

Commuter Benefits (In-Office & US Only)

• Monthly Wellness Stipend
• Autonomous Work Environment
• In Office Set-Up Reimbursement (In-Office Only)
• Quarterly Team Gatherings
• In Office Amenities (In-Office Only)
• Want to learn more about what we are up to?
• Self-driving Company
• AI Adoption
• Build Open-Source Apps

Interviewing + Culture at Replit

• Operating Principles

• To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world.
• We welcome your unique perspective and experiences in shaping this product.
• We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.