250K–387K USD / year
Engineering Manager, Security (Cloud, Infrastructure & Application Security)
Engineering managerHybrid — Foster City, CA
Published on 2026-11-10
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Lead the teams responsible for securing Replit’s cloud infrastructure and application development lifecycle. The role focuses on vulnerability remediation within SLAs, compliance delivery, and making secure practices easy for developers.
About the company
Replit is an online platform that provides integrated coding environments for developers and learners, enabling users to write, run, and collaborate on code in various programming languages. The company caters to a diverse user base, including educators, students, and professional developers.
The team
Cloud & Infrastructure Security and Application Security & Secure SDLC teams.
Stack
GCPAWSAzureKubernetesTerraformWizOrcaPrisma Cloud
What you'll do
- Build, lead, and mentor cloud security, infrastructure vulnerability management, and application security engineers.
- Set security roadmaps and OKRs while balancing risk reduction with developer velocity.
- Own remediation SLAs and drive vulnerability fixes across cloud, infrastructure, containers, and code.
- Develop automated finding-routing, tracking, escalation, and audit-evidence workflows.
- Lead cloud security posture, configuration hardening, and Kubernetes and data security posture programs.
- Run SCA, SAST, and IaC scanning programs and advance software supply chain security.
- Develop the Secure SDLC program, developer training, secure defaults, and a Security Champions network.
- Partner with incident response and engineering teams on vulnerability context and post-incident remediation.
What we're looking for
- 8+ years in security engineering, cloud security, or DevSecOps, including security people-management or formal tech-lead experience.
- Hands-on GCP security expertise and working knowledge of AWS and/or Azure.
- Experience running vulnerability management programs and driving remediation across multiple engineering teams.
- Experience with CSPM/CNAPP and SCA, SAST, and IaC scanning tools integrated into CI/CD.
- Strong knowledge of Kubernetes, container security, and infrastructure as code.
- Experience building a Secure SDLC program and delivering developer security training.
- Ability to write or review code and automation in Python, Go, TypeScript, or similar.
- Understanding of security controls and remediation SLAs for compliance frameworks, plus experience producing audit evidence.
Nice to have
- Experience securing developer platforms, multi-tenant SaaS, or AI/ML infrastructure.
- Knowledge of SLSA, Sigstore, or SBOM standards.
- Experience building Security Champions programs or developer-facing security tools.
- Experience leading security work for external audits.
- Certifications such as CCSP, GCP Professional Cloud Security Engineer, OSCP, or CSSLP.
Benefits
- Equity
- 401(k) with a 4% match (US only)
- Health, dental, vision, and life insurance
- Paid parental, medical, and caregiver leave
- Flexible time off and holidays
- Monthly wellness stipend
- Quarterly team gatherings