Replit
Cloud Security Lead
Foster City, CA · Senior · Full-time
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This is a highly impactful, hands-on leadership role-perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams.
Responsibilities
- Lead configuration hardening across GCP, with additional oversight of workloads and integrations running in AWS and Azure.
- Own and optimize CSPM platforms across multi-cloud environments-establishing configuration baselines, guardrails, and remediation workflows.
- Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services.
- Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments.
- Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure.
- Support incident investigations as a cloud security subject-matter expert.
Requirements
- 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role.
Nice to have
- Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services.
- Experience in high-growth technology or cloud-native product companies.
- Experience with securing AI/agentic systems and sensitive data pipelines.
- Automation/scripting with Python.
- Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs).
- Problem-solving mindset.
- Ability to break down complex security and operational challenges into clear engineering solutions.
- Autonomy - Comfortable leading initiatives, collaborating effectively, and driving outcomes with minimal oversight.
Skills
- Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.).
- Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging).
- Experience securing and governing SaaS platforms and identity integrations.
- Operational experience with infrastructure vulnerability management across cloud and container environments.
- Working knowledge of AWS and/or Azure security services and configurations.
- Experience with container and Kubernetes security across GKE, EKS, or AKS.
- Strong IaC security experience with Terraform, Pulumi, or similar tooling.
- Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS).
- With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
Compensation
- 💰 Competitive Salary & Equity
Company info
- Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world.
- Participate in communicating security advisories, best practices, and updates to Replit's customers.
This listing is sourced directly from Replit's careers page and normalized into a canonical job model.