Security Incident Response Engineer - Cloud & IR Automation

Replit, Inc.; Foster City (CA); Hybrid; USD 140.000 - 210.000; Vollzeit

Benefits dieser Stelle

Health, dental, vision

401(k) with 4% match

Paid parental leave

Flexible time off

Commuter benefits

Wellness stipend

Zusammenfassung

Replit, Inc. is seeking a Security Engineer with deep incident response experience to defend a cloud-native AI vibe-coding platform.

You will lead investigations from signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed during fast-moving incidents. You will write scripts and tooling to reduce triage time, enrich evidence, revoke access, and harden the platform.

Qualifikationen

• Proven experience leading or technical lead on security incidents in cloud/SaaS.
• Strong hands-on investigation with SIEM/logs and large datasets under time pressure.
• Proficient in production-quality scripts/tools (Python/Go/Bash) for IR.
• Solid cloud security knowledge with GCP (IAM, audit logging, GKE).
• Working knowledge of Kubernetes and containers for containment.

Aufgaben

• Serve as incident commander or technical lead for security incidents, from detection through post-incident review.
• Coordinate response across Security, SRE, Engineering, Legal, and leadership; document actions.
• Communicate incident status, impact, and risk to technical and executive audiences.
• Participate in and help shape the security on-call rotation.
• Investigate suspicious activity across cloud, containers, identity, and apps using SIEM and telemetry.
• Determine scope, root cause, attacker behavior, and blast radius for incidents.
• Assess emerging threats and whether they apply to Replit and if affected.
• Build scripts and tooling to speed response (enrichment, evidence collection, revocation).
• Develop and maintain response playbooks and runbooks; automate where possible.
• Integrate response workflows with SIEM, SOAR, ticketing, and chat tools.

Kenntnisse

Incident lead

SIEM analysis

Scripting (Python/Go)

GCP IAM & logging

Kubernetes & containers

Identity systems

CI/CD knowledge

NIST 800-61

Tools

SOAR

Jobbeschreibung

Replit, Inc. is seeking a Security Engineer with deep incident response experience to defend a cloud-native AI vibe-coding platform.

You will lead investigations from signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed during fast-moving incidents. You will write scripts and tooling to reduce triage time, enrich evidence, revoke access, and harden the platform.