Global SOC Lead: AI-Driven 24/7 Security Operations

Replit; United States; On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Flexible hours

Remote‑first

Disability insurance

Monthly stipend

Health/Dental/Vision/Life

Home office stipend

Parental leave

Flexible PTO

401k

Offsites

Commuter benefits

Equity

Job summary

Replit is seeking a Security Operations Lead to build and operate 24/7 detection and response in a cloud‑native AI‑driven environment. You will lead the global SOC, own SIEM, detection engineering, alert triage, and drive modernization across multi‑cloud and Kubernetes.

As a hands‑on leader, you will shape the SOC of the future, evaluate AI‑based SOC products, automate triage, investigations, and reporting, while collaborating with engineering, cloud security, and IT teams to ensure robust

Qualifications

• 7+ years in Security Operations with lead experience.
• Strong 24/7 SOC expertise across multi-cloud and on‑prem.
• Hands-on detection engineering, event correlation and log analysis.
• Familiarity with AI‑based SOC platforms and LLM‑driven tools.
• Scripting in Python/Go/Bash and SOAR automation.
• Security certifications (GCIH, GCIA, GCFA, etc.).

Responsibilities

• Lead global SOC operations and 24/7 monitoring, triage, and escalation.
• Build operational rigor with processes, runbooks, SLAs, metrics and quality standards.
• Oversee multi‑cloud telemetry: GCP, AWS, Azure; Kubernetes clusters; SaaS and endpoints.
• Evaluate and integrate AI‑native SOC tech for triage, detection and correlation.
• Own SIEM ingestion, normalization, enrichment, dashboards and metrics.
• Drive complex investigations across cloud, SaaS, endpoints and developer platforms.
• Guide root-cause analysis and remediation with engineering teams.
• Communicate threats, gaps and trends to leadership.

Skills

SIEM platforms

SOC leadership

Python scripting

Cloud security monitoring

AI/ML SOC tooling

24/7 operations

Endpoint telemetry

Job description

Replit is seeking a Security Operations Lead to build and operate 24/7 detection and response in a cloud‑native AI‑driven environment. You will lead the global SOC, own SIEM, detection engineering, alert triage, and drive modernization across multi‑cloud and Kubernetes.

As a hands‑on leader, you will shape the SOC of the future, evaluate AI‑based SOC products, automate triage, investigations, and reporting, while collaborating with engineering, cloud security, and IT teams to ensure robust