Replit

Replit

Security Engineer - Incident Response

Foster City, CA · Full-time

Sponsorship not specified$61k-$800kDetected 16 days ago
PythonGoBashGCPCloud PlatformsKubernetesCI/CDLinuxSite Reliability EngineeringMachine LearningCybersecuritySIEMSOARIncident ResponseSupply ChainCommunicationCollaboration

Stay score

odds of building a lasting career here

61Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

18 transfer filings in the last year, covering 18 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform.
  • You'll be the person who takes charge when something goes wrong.
  • We want a well-rounded security engineer who has run real incidents and wants to make the next one faster.

Responsibilities

  • Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review.
  • Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken.
  • Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage.
  • Develop and maintain response playbooks and runbooks, and automate them where possible.
  • Lead blameless post-incident reviews and drive remediation items to completion.
  • Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment.

Requirements

  • Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes.

Nice to have

  • Digital forensics experience with cloud, Linux hosts, or containers.
  • Experience with threat intelligence, threat hunting, or security research.
  • Experience with bug bounty programs or coordinated vulnerability disclosure.
  • Familiarity with detection-as-code practices and writing detection rules.
  • Experience in fast-paced, cloud-native, or AI/ML-driven environments.
  • Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience.
  • Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems.
  • Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning.

Skills

  • Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation.
  • Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking).
  • Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads.
  • Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.

Compensation

  • 💰 Competitive Salary & Equity

Benefits

  • Turn incident findings into new or improved detections, logging coverage, and visibility.

Company info

  • ABOUT THE ROLE We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform.
  • Replit is the agentic software creation platform that enables anyone to build applications using natural language.
Apply directly at Replit →Create a free account for alerts like thisView Replit immigration profile

This listing is sourced directly from Replit's careers page and normalized into a canonical job model.