Security Engineer - Vuln Management (Infra)

About this role

Replit is looking for a mid-level Infrastructure Vulnerability Management Engineer with expertise in Cloud Security and DevSecOps. This role focuses on securing multi-cloud environments, managing vulnerabilities, and ensuring compliance while collaborating across engineering teams during security incidents.

What you'll do

• Perform continuous security scanning for cloud and infrastructure misconfigurations
• Manage Cloud Security Posture Management and optimize security tools
• Integrate IaC security scanning into CI/CD pipelines
• Oversee vulnerability lifecycle for container images and VMs
• Document and manage infrastructure vulnerabilities for compliance
• Assist during security incidents and develop real-time countermeasures

What they're looking for

• 5 years of Cloud Security or DevSecOps experience
• Strong knowledge of GCP, AWS or Azure
• Experience with security platforms like Wiz or Prisma Cloud
• Proficiency in IaC tools like Terraform
• Understanding of Docker and Kubernetes security
• Familiarity with compliance frameworks such as SOC 2 or ISO 27001

Benefits

• [unknown]
• [unknown]
• [unknown]
• [unknown]
• [unknown]
• [unknown]