SOC Engineer

About this role

Build and evolve Replit’s security data lake and engineer high-fidelity detections for its cloud-native platform. The role also monitors emerging threats and supports targeted investigations to strengthen automated defenses.

About the company

Replit is an online platform that provides integrated coding environments for developers and learners, enabling users to write, run, and collaborate on code in various programming languages. The company caters to a diverse user base, including educators, students, and professional developers.

The team

Security Operations

Stack

What you'll do

• Unify cloud, identity, endpoint, and application telemetry in the security data lake.
• Develop, test, and tune detection rules to improve threat coverage and reduce noise.
• Assess emerging threats and determine their relevance to Replit’s systems and services.
• Investigate incidents using logs, telemetry, SIEM, metrics, and Cloud Logging.

What we're looking for

• Experience building security data lakes and investigating with SIEM and cloud logs.
• Experience engineering security infrastructure and automation with infrastructure as code.
• Strong end-to-end detection engineering skills.
• Understanding of software engineering fundamentals and CI/CD workflows.
• Knowledge of cloud architecture, especially GCP.
• Familiarity with SaaS architectures, identity systems, and integrations.

Nice to have

• Threat intelligence, security research, or vulnerability analysis experience.
• Familiarity with Kubernetes, containers, serverless, or distributed systems.
• Scripting or automation experience with Python, Go, or Bash.
• Experience with bug bounty or coordinated vulnerability disclosure programs.

Benefits

• Competitive salary and equity
• 401(k) with 4% match
• Paid parental, medical, and caregiver leave
• Flexible time off and holidays
• Monthly wellness stipend