SOC Engineer

Replit

. Architect, expand, and maintain Replit's security data lake .

Posted 11/10/2026full-timeFoster City • California • United StatesMid-LevelSenior💰 $250,000 - $374,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting and maintaining security data lakes, with a strong focus on unifying telemetry across cloud-native environments. Proficient in end-to-end detection engineering and incident investigation, leveraging tools like SIEM and Cloud Logging to enhance security posture.

Highest-signal resume keywords

Security Data Lake ArchitectureEnd-To-End Detection EngineeringSIEM ExperienceCloud Logging ProficiencyGoogle Cloud Platform (GCP) Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection Rule DevelopmentLog-Based Investigation WorkflowsInfrastructure-As-CodeSoftware Engineering FundamentalsCI/CD PipelinesScripting in PythonScripting in GoScripting in BashThreat Intelligence AnalysisVulnerability Analysis

Tools & Technologies

SIEMCloud LoggingKubernetesContainersServerless Infrastructure

Industry Keywords

Cloud-Native StackIdentity SystemsApplication TelemetryBug Bounty ProgramsCoordinated Vulnerability Disclosure

Tech Stack

Tools & technologies

CloudDistributed SystemsGoogle Cloud PlatformKubernetesPythonGo

About the role

Key responsibilities & impact

Architect, expand, and maintain Replit's security data lake
Design, test, and tune custom detection rules to maximize threat coverage and minimize noise
Unify cloud, identity, endpoint, and application telemetry across the cloud-native stack
Monitor emerging threats, including 0-days, bad actor activity, public exploitation campaigns, bug bounty reports, and customer security issues
Rapidly assess threats' applicability to Replit's infrastructure, SaaS services, internal tools, and platform components
Conduct targeted investigations to determine impact
Analyze logs, telemetry, and system behaviors using SIEM, metrics, and Cloud Logging
Identify gaps in detection and visibility
Support incident investigations and translate real-world threats into stronger automated defenses

Requirements

What you’ll need

Building and evolving the security data lake, unifying cloud, identity, endpoint, and application telemetry
Hands-on experience with SIEM, Cloud Logging, and log-based investigation workflows
Engineering reliable security infrastructure and automation using infrastructure-as-code
Proven expertise in end-to-end detection engineering, including developing, testing, and tuning custom detection rules
Strong understanding of software engineering fundamentals, including code structure, build systems, dependencies, and package ecosystems
Understanding of CI/CD pipelines and DevOps workflows
Solid knowledge of cloud architecture, especially Google Cloud Platform (GCP) services in modern cloud-native deployments
Familiarity with SaaS architectures, identity systems, and integration patterns
Experience with threat intelligence, security research, or vulnerability analysis (bonus)
Familiarity with Kubernetes, containers, serverless infrastructure, or modern distributed systems (bonus)
Ability to write scripts or small tools using Python, Go, or Bash (bonus)
Experience working with bug bounty programs or coordinated vulnerability disclosure workflows (bonus)
Experience in fast-paced, cloud-native, or AI/ML-driven environments (bonus)
Legally authorized to work in the United States

Benefits

Comp & perks

Competitive Salary & Equity
401(k) Program with a 4% match (US Only)
Health, Dental, Vision and Life Insurance
Short Term and Long Term Disability
Paid Parental, Medical, Caregiver Leave
Flexible Time Off (FTO) + Holidays
Commuter Benefits (In-Office & US Only)
Monthly Wellness Stipend
Autonomous Work Environment
In Office Set-Up Reimbursement (In-Office Only)
Quarterly Team Gatherings
In Office Amenities (In-Office Only)