Cloud Security Lead

Replit

. Shape and own Replit’s cloud and infrastructure security program across GCP, AWS, Azure, containers, SaaS platforms, and multi-tenant AI infrastructure .

Posted 10/6/2026full-timeFoster City • California • United StatesSenior💰 $250,000 - $325,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cloud security across GCP, AWS, and Azure, with a strong focus on vulnerability management, configuration hardening, and securing SaaS platforms. Proficient in embedding security into development workflows and collaborating with cross-functional teams to enhance overall security posture.

Highest-signal resume keywords

Cloud Security ExpertiseCSPM Tools ExperienceInfrastructure Vulnerability ManagementContainer and Kubernetes SecurityIaC Security with Terraform

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GCP SecurityAWS SecurityAzure SecurityCSPM ToolsInfrastructure Vulnerability ManagementContainer SecurityKubernetes SecurityIaC SecurityCloud LoggingAccess Controls

Soft Skills

CommunicationCollaborationIncident Investigation

Tools & Technologies

TerraformPulumiWizLaceworkPrismaOrcaSCCCI/CD PipelinesCloud-Native DeploymentsSecurity Monitoring

Certifications & Qualifications

GCP Professional Cloud Security EngineerAWS Security CertificationsAzure Security Certifications

Industry Keywords

SaaS PlatformsCompliance StandardsSOC 2ISO 27001PCI DSSAI/ML PipelinesCloud-Native EnvironmentsPaaSMulti-Tenant InfrastructureSecurity Best Practices

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonTerraform

About the role

Key responsibilities & impact

Shape and own Replit’s cloud and infrastructure security program across GCP, AWS, Azure, containers, SaaS platforms, and multi-tenant AI infrastructure
Lead configuration hardening across GCP, with oversight of AWS and Azure workloads and integrations
Own and optimize CSPM platforms, configuration baselines, guardrails, and remediation workflows
Secure critical SaaS platforms through proper configurations, access controls, and engineering integrations
Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services
Enhance security for containerized and Kubernetes workloads, including runtime protections, network policies, and workload identity
Assess cloud and SaaS logging configurations, audit logs, retention, and routing
Partner with engineering teams to embed security into development workflows, CI/CD pipelines, and cloud-native deployments
Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure
Communicate security advisories, best practices, and updates to Replit customers
Support incident investigations as a cloud security subject-matter expert

Requirements

What you’ll need

7+ years of experience in cloud engineering, with 3+ years in a senior or lead role
Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.)
Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging)
Experience securing and governing SaaS platforms and identity integrations
Operational experience with infrastructure vulnerability management across cloud and container environments
Working knowledge of AWS and/or Azure security services and configurations
Experience with container and Kubernetes security across GKE, EKS, or AKS
Strong IaC security experience with Terraform, Pulumi, or similar tooling
Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS)
Preferred: experience supporting engineering teams in building secure-first, cloud-native or PaaS environments
Preferred: background securing AI/ML pipelines, model-serving infrastructure, or developer platform services
Preferred: experience in high-growth technology or cloud-native product companies
Preferred: experience securing AI/agentic systems and sensitive data pipelines
Preferred: automation/scripting with Python
Preferred: relevant certifications, such as GCP Professional Cloud Security Engineer or AWS/Azure security certifications
Ability to work from the Foster City, CA office Monday, Wednesday, and Friday
Legally authorized to work in the United States
Must be at least 18 years of age

Benefits

Comp & perks

Competitive Salary & Equity
401(k) Program with a 4% match (US Only)
Health, Dental, Vision and Life Insurance
Short Term and Long Term Disability
Paid Parental, Medical, Caregiver Leave
Flexible Time Off (FTO) + Holidays
Commuter Benefits (In-Office & US Only)
Monthly Wellness Stipend
Autonomous Work Environment
In Office Set-Up Reimbursement (In-Office Only)
Quarterly Team Gatherings
In Office Amenities (In-Office Only)