# Security Engineer - Incident Response

Hiring organization: [Replit](https://career.thegoodapps.co/organizations/replit)

Canonical page: https://career.thegoodapps.co/jobs/87c40634-72b8-446b-9883-b28a82bda567

Listed on Replit's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Mid
- Location: Foster City, CA
- Remote: yes
- Salary: 230000 – 360000 USD per year

## Summary

Replit seeks a hands-on security engineer to lead incident response efforts across their cloud-native platform, investigating breaches and coordinating fixes across teams. The role balances real-time incident command with building automation and detection improvements to prevent future attacks.

_Our summary, not Replit's wording._

## Skills named

Bash (Scripting), Go, Google Cloud Platform, Kubernetes, Python

## Required

- Led or served as technical lead on security incidents in cloud or SaaS environment
- Hands-on investigation with SIEM, cloud audit logs, and log analysis
- Production-quality scripting in Python, Go, or Bash
- Cloud architecture and security knowledge, especially Google Cloud Platform
- Kubernetes and container investigation and containment experience
- Understanding of identity systems, SaaS architectures, and cloud attack paths
- Familiarity with software engineering, CI/CD pipelines, and package ecosystems
- Knowledge of incident response frameworks and vulnerability lifecycle

## Nice to have

- SOAR or response automation platform experience
- Digital forensics with cloud, Linux, or containers
- Threat intelligence, threat hunting, or security research background
- Bug bounty or coordinated vulnerability disclosure experience
- Detection-as-code practices and writing detection rules
- Experience in fast-paced, cloud-native, or AI/ML environments
- Relevant certifications like GCIH, GCFA, or GCFR

Apply on Replit's site: https://jobs.ashbyhq.com/replit/de941de4-b0f2-4de8-a018-af667c67f33e/application