Security Engineer - Vuln Management (Infra)

The role

You will manage infrastructure vulnerability lifecycles and secure multi-cloud environments. You will identify misconfigurations and serve as a technical responder during security incidents.

What you will do

• Perform continuous security scanning across cloud posture and workloads.
• Optimize CSPM, KSPM, and DSPM tools.
• Configure and embed automated IaC security scanning tools into CI/CD pipelines.
• Manage vulnerability scanning lifecycle for container images, registries, and VMs.
• Track and manage infrastructure vulnerabilities according to compliance SLAs.
• Escalate and report critical production exposures to the CISO and senior leadership.
• Partner with SRE, DevOps, and Platform teams for remediation.
• Assist Incident Response teams during active cloud or host-level breaches.

Required qualifications

• 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles.
• Strong foundational experience working with multi-cloud environments.
• Hands-on experience operating modern infrastructure security platforms such as Wiz, Orca, Prisma Cloud, Lacework, or cloud-native options.
• Strong proficiency with Infrastructure as Code platforms (Terraform, Pulumi) and GitOps deployment workflows.
• Ability to evaluate and configure IaC scanners like Checkov, Tfsec, or KICS.
• Deep understanding of Docker/container security and Kubernetes architectures.
• Understanding of how infrastructure configurations and vulnerability management map to security compliance frameworks like SOC 2, ISO 27001, CIS Benchmarks, or NIST.

Nice to have

• Deep GCP expertise preferred
• working knowledge of AWS or Azure

Benefits

• Competitive Salary & Equity
• 401(k) Program with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays
• Commuter Benefits (In-Office & US Only)
• Monthly Wellness Stipend
• Autonomous Work Environment
• In Office Set-Up Reimbursement (In-Office Only)
• Quarterly Team Gatherings
• In Office Amenities (In-Office Only)

About the company

Replit is the agentic software creation platform that enables anyone to build applications using natural language. It is democratizing software development by removing traditional barriers to application creation.