Security Engineering Manager: Lead Cloud, Infra & App Security

Replit; Foster City (CA); Presencial; USD 180 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

401(k) match

Health, Dental, Vision

Paid parental leave

Flexible time off

Monthly wellness stipend

In-office setup reimbursement

Quarterly team gatherings

Resumo da oferta

Replit is seeking an Engineering Manager, Security to lead Cloud & Infrastructure Security, Application Security, and Secure SDLC teams. You’ll drive remediation, align with compliance obligations, and grow a high-performing security organization across cloud, containers, and code.

You will partner with engineering leaders to fix vulnerabilities on time, set roadmaps, and make secure-by-default the default path for developers. Strong leadership and cloud security expertise are required.

Qualificações

• 8+ years in security engineering, cloud security, or DevSecOps.
• Deep knowledge of cloud security in GCP with AWS/Azure familiarity.
• Proven track record running vulnerability management programs at scale.
• Hands-on with CSPM/CNAPP platforms (e.g., Wiz, Orca, Prisma Cloud, Lacework).
• Experience with SCA, SAST, and IaC scanning tools and CI/CD integration.
• Strong Kubernetes/container security and IaC (Terraform) experience.
• Proven Secure SDLC program development and developer training.
• Ability to write/review code or automation (Python/Go/TypeScript).
• Understanding remediation SLAs mapped to SOC 2/ISO 27001/PCI DSS/FedRAMP and auditing evidence.
• Experience with security incident response in cloud-native environments.
• Excellent communication to influence leadership.

Responsabilidades

• Lead and mentor security engineers across cloud, infra, and app security.
• Define multi-year roadmaps and quarterly OKRs for cloud security and Secure SDLC.
• Set ownership, on-call processes, and security metrics reporting.
• Manage remediation SLAs and drive timely fixes across teams.
• Build automated workflows for findings routing and closure.
• Collaborate on audits and produce audit-ready remediation evidence.
• Track metrics like SLA attainment and MTTR by team/severity.
• Oversee CSPM/KSPM/DSPM tooling strategy and secure baselines.

Conhecimentos

Security engineering

Cloud security

Vulnerability management

SCA/SAST/IaC scanning

Kubernetes security

Secure SDLC

Coding (Python/Go/TypeScript)

Audit/compliance evidence

Ferramentas

Wiz

Orca

Prisma Cloud

Lacework

GCP Security Command Center

Snyk

Semgrep

CodeQL

Checkmarx

Dependabot

Checkov

tfsec

Descrição da oferta de emprego

Replit is seeking an Engineering Manager, Security to lead Cloud & Infrastructure Security, Application Security, and Secure SDLC teams. You’ll drive remediation, align with compliance obligations, and grow a high-performing security organization across cloud, containers, and code.

You will partner with engineering leaders to fix vulnerabilities on time, set roadmaps, and make secure-by-default the default path for developers. Strong leadership and cloud security expertise are required.