AI-Driven Global SOC Lead — 24/7 Cloud Security

Replit; California (MO); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Salary & Equity

401k Match

Health/Dental/Vision

Disability Insurance

Parental Leave

Flexible PTO

Commuter Benefits

Wellness Stipend

Autonomous Work Environment

Office Reimbursement

Team Gatherings

Office Amenities

Job summary

Replit is seeking a Security Operations Lead to build, mature, and operate our 24/7 detection and response capabilities in a cloud-native, AI-driven environment. You will lead the global SOC, own SIEM, detection engineering, and 24/7 monitoring across multi-clouds and endpoints.

This hands-on leadership role shapes the SOC of the future in a high-scale AI setting. The position is full-time and can be performed from our Foster City, CA office with in-office days Monday, Wednesday, and Friday.

Qualifications

• 7+ years of experience in Security Operations, with 3+ years in a senior or lead capacity.

Responsibilities

• Lead, mentor, and scale a global SOC team responsible for 24/7 monitoring, alert intake, triage, correlation, and escalation.
• Build operational rigor: processes, runbooks, SLAs, metrics, and quality standards for high-scale environments.
• Own the entire SIEM ecosystem—ingestion, normalization, correlation, enrichment, tuning, dashboards, and metrics.
• Expand telemetry across: Cloud logs, API logs, system events, SaaS audit logs, identity providers, Endpoint telemetry.

Skills

Leadership

Cloud security monitoring

MITRE ATT&CK

SaaS security monitoring

Endpoint security telemetry

Identity security

SOAR scripting

Threat hunting

Tools

Chronicle

Splunk

Elastic

Microsoft Sentinel

Panther

CrowdStrike

SentinelOne

Defender

Job description

Replit is seeking a Security Operations Lead to build, mature, and operate our 24/7 detection and response capabilities in a cloud-native, AI-driven environment. You will lead the global SOC, own SIEM, detection engineering, and 24/7 monitoring across multi-clouds and endpoints.

This hands-on leadership role shapes the SOC of the future in a high-scale AI setting. The position is full-time and can be performed from our Foster City, CA office with in-office days Monday, Wednesday, and Friday.