Skip to main content
CareerApp

Cloud Security Lead

Replit

Foster City, CA · Remote · full time · Lead / Staff / Principal

$250,000 – $325,000

Listed on Replit’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Lead cloud and infrastructure security strategy across Replit's multi-cloud platforms serving millions of developers, with hands-on responsibility for GCP hardening, vulnerability management, and secure-by-default engineering practices. This role suits experienced cloud security engineers who want to shape security architecture at scale while working closely with product and infrastructure teams.

Our summary, not Replit’s wording. The full posting is on their site.

What they ask for

Required

  • 7+ years of cloud engineering experience
  • 3+ years in a senior or lead role
  • Hands-on experience with CSPM tools
  • Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging)
  • Experience securing SaaS platforms and identity integrations
  • Operational infrastructure vulnerability management experience across cloud and containers
  • Working knowledge of AWS and/or Azure security services
  • Container and Kubernetes security experience across GKE, EKS, or AKS
  • Strong IaC experience with Terraform, Pulumi, or similar
  • Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS)

Nice to have

  • Experience supporting engineering teams in building secure-first cloud-native or PaaS environments
  • Background securing AI/ML pipelines or model-serving infrastructure
  • Experience in high-growth technology or cloud-native product companies
  • Experience securing AI/agentic systems and sensitive data pipelines
  • Automation and scripting with Python
  • Relevant cloud security certifications (GCP Professional Cloud Security Engineer, AWS/Azure security certs)

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.