Security Engineering Leader - Cloud, Infra & AppSec

Speedrun Talent Network; Foster City (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive Salary & Equity

401(k) Program with a 4% match (US)

Health, Dental, Vision and Life

Short Term and Long Term Disability

Parental Leave

Flexible Time Off

Commuter Benefits

Wellness Stipend

Autonomous Work Environment

In Office Setup Reimbursement

Quarterly Team Gatherings

In Office Amenities

Job summary

Replit is seeking an Engineering Manager, Security to lead the teams securing our cloud, infrastructure, and code. You will hire and grow a high-performing team, define multi-year roadmaps, and partner with engineering to remediate findings within SLA while aligning with SOC 2, ISO 27001, PCI DSS, and FedRAMP.

You will own remediation SLAs, drive secure SDLC, and collaborate with Compliance, IR, Platform, and ML teams to keep security posture strong and developer velocity high.

Qualifications

• 8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers (or 3+ years as a tech lead with formal people-leadership responsibility).
• Hands-on knowledge of cloud security in GCP with working knowledge of AWS/Azure: IAM, networking, logging, policies, and security services.
• Proven track record running vulnerability management programs at scale across cloud, containers, and application code.
• Experience with CSPM/CNAPP platforms and SCA/SAST/IaC scanning tools integrated into CI/CD.
• Strong understanding of Kubernetes security and Infrastructure-as-Code.

Responsibilities

• Lead security teams across cloud, infrastructure, and application security; own hiring, career development, and performance.
• Define multi-year roadmaps and quarterly OKRs for cloud security, vulnerability management, and Secure SDLC.
• Own remediation SLAs by severity and map to compliance obligations (SOC 2, ISO 27001, PCI DSS, FedRAMP).
• Build automated workflows to route findings, track closure, and escalate before SLAs breach.
• Partner with Compliance/IR/Platform teams to produce audit-ready evidence and support external audits.

Skills

Security leadership

Cloud security

Vulnerability mgmt

SCA/SAST

Kubernetes security

IaC security

CI/CD security

Audit evidence

Education

Bachelor's degree in Computer Science or related field

Tools

GCP

AWS

Azure

Job description

Replit is seeking an Engineering Manager, Security to lead the teams securing our cloud, infrastructure, and code. You will hire and grow a high-performing team, define multi-year roadmaps, and partner with engineering to remediate findings within SLA while aligning with SOC 2, ISO 27001, PCI DSS, and FedRAMP.

You will own remediation SLAs, drive secure SDLC, and collaborate with Compliance, IR, Platform, and ML teams to keep security posture strong and developer velocity high.