Skip to main content
CareerApp

Security Engineer - Incident Response

Replit

Foster City, CA · Remote · full time · Mid

$230,000 – $360,000

Listed on Replit’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Replit seeks a hands-on security engineer to lead incident response efforts across their cloud-native platform, investigating breaches and coordinating fixes across teams. The role balances real-time incident command with building automation and detection improvements to prevent future attacks.

Our summary, not Replit’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Led or served as technical lead on security incidents in cloud or SaaS environment
  • Hands-on investigation with SIEM, cloud audit logs, and log analysis
  • Production-quality scripting in Python, Go, or Bash
  • Cloud architecture and security knowledge, especially Google Cloud Platform
  • Kubernetes and container investigation and containment experience
  • Understanding of identity systems, SaaS architectures, and cloud attack paths
  • Familiarity with software engineering, CI/CD pipelines, and package ecosystems
  • Knowledge of incident response frameworks and vulnerability lifecycle

Nice to have

  • SOAR or response automation platform experience
  • Digital forensics with cloud, Linux, or containers
  • Threat intelligence, threat hunting, or security research background
  • Bug bounty or coordinated vulnerability disclosure experience
  • Detection-as-code practices and writing detection rules
  • Experience in fast-paced, cloud-native, or AI/ML environments
  • Relevant certifications like GCIH, GCFA, or GCFR

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.