SOC Engineer: Build Cloud-Native Threat Telemetry

Speedrun Talent Network; Foster City (CA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health, Dental, Vision and Life

401(k) with 4% match

Paid parental leave

Flexible time off

Commuter benefits

Wellness stipend

In-office setup reimbursement

Quarterly team gatherings

Job summary

Replit is seeking a SOC Engineer to join the Security Operations team, focusing on building a security data lake, telemetry, and end-to-end detection engineering for a cloud-native AI vibe-coding platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor emerging threats, and support incident investigations to translate threats into automated defenses. This hands-on role requires strong software engineering depth, CI/CD familiarity, and modern cloud-native expertise.

Qualifications

• Hands-on experience with SIEM, Cloud Logging, and log-based investigations.
• Infrastructure-as-code to automate security infrastructure and close visibility gaps.
• End-to-end detection engineering: develop, test, and tune custom rules to maximize threat coverage and reduce noise.
• Strong understanding of software engineering fundamentals, build systems, dependencies, and package ecosystems.
• Knowledge of CI/CD pipelines and DevOps workflows.
• Solid knowledge of Google Cloud Platform (GCP) services in cloud-native deployments.
• Familiarity with SaaS architectures, identity systems, and integration patterns.

Responsibilities

• Architect, expand, and maintain the security data lake and design, test, and tune detection rules.
• Monitor emerging threats and assess applicability to Replit's infrastructure, SaaS services, internal tools, and platform components.
• Conduct targeted investigations to determine impact, analyze logs and telemetry, and identify gaps in detection/visibility.

Skills

SIEM

Cloud Logging

Detection Engineering

Cloud-native

CI/CD

DevOps

GCP

SaaS architectures

Threat awareness

Tools

Kubernetes

Python

Go

Bash

Job description

Replit is seeking a SOC Engineer to join the Security Operations team, focusing on building a security data lake, telemetry, and end-to-end detection engineering for a cloud-native AI vibe-coding platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor emerging threats, and support incident investigations to translate threats into automated defenses. This hands-on role requires strong software engineering depth, CI/CD familiarity, and modern cloud-native expertise.