Engineering Manager, Security (Cloud, Infrastructure & Application Security)
Replit is an agentic AI software-creation platform for creating, launching, and growing apps, websites, tools, and businesses through natural language.
Funding history
About Replit
Replit combines an AI agent with integrated application infrastructure—including authentication, databases, hosting, monitoring, integrations, and enterprise controls—to let users build and deploy software from one workspace.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead the cloud and infrastructure security and application security teams, with a core focus on getting vulnerabilities fixed on time. You will partner with engineering teams to drive remediation within SLA, own roadmap and OKRs, run code scanning programs, build the Secure SDLC program, and support incident response with context and follow-up fixes.
Requirements
- 8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers
- Deep hands-on cloud security knowledge in GCP plus AWS and/or Azure
- Track record running vulnerability management programs at scale
- Hands-on experience with CSPM/CNAPP platforms
- Hands-on experience with SCA, SAST, and IaC scanning tools and CI/CD integration
- Strong understanding of Kubernetes, container security, and Infrastructure-as-Code
- Track record building a Secure SDLC program
- Ability to write and review code or automation
- Understanding of compliance frameworks and audit evidence
- Working understanding of cloud-native incident response
- Excellent communication skills
Responsibilities
- Build, lead, and mentor cloud, infrastructure, and application security engineers
- Define roadmap and quarterly OKRs for cloud security, vulnerability management, and Secure SDLC
- Own remediation SLAs and map them to compliance obligations
- Partner with engineering teams to land fixes within SLA
- Manage the exception and risk-acceptance process
- Build automated workflows routing findings to owning teams
- Produce audit-ready evidence with Compliance/GRC
- Lead infrastructure vulnerability management and configuration hardening across GCP, AWS, and Azure
- Own CSPM, KSPM, and DSPM tooling strategy
- Own SCA, SAST, and IaC scanning programs
- Drive software supply chain security
- Run Secure SDLC program and security training
- Support incident response and track follow-up remediation
Benefits
- Competitive salary and equity
- 401(k) with 4% match (US only)
- Health, dental, vision and life insurance
- Short and long term disability
- Paid parental, medical, and caregiver leave
- Flexible time off and holidays
- Commuter benefits (in-office and US only)
- Monthly wellness stipend
- In-office set-up reimbursement
- Quarterly team gatherings
- In-office amenities