SOC Engineer - Cloud-Native Detection & Data Lake

Replit; Foster City (CA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health, Dental, Vision and Life

401(k) Program with a 4% match (US)

Paid Parental, Medical, CaregiverLeave

Flexible Time Off

Commuter Benefits

Monthly Wellness Stipend

Autonomous Work Environment

In Office Set-Up Reimbursement

Quarterly Team Gatherings

In Office Amenities

Job summary

Replit is seeking a SOC Engineer to join our Security Operations team. You will build and evolve the security data lake, engineer telemetry, and own high-fidelity detection end-to-end across our cloud-native platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor threats, and translate incidents into automated defenses. This hands-on role requires deep software engineering, CI/CD experience, and strong cloud security skills in GCP.

Qualifications

• Experience building and evolving a security data lake with unified telemetry from cloud, identity, endpoint, and apps.
• Hands-on automation via infrastructure-as-code to close visibility gaps and enable log-based investigations.
• Proven detection engineering: develop, test, and tune rules to maximize coverage and minimize noise.
• Strong software engineering fundamentals: code structure, build systems, dependencies, and package ecosystems.
• Understanding of CI/CD pipelines and DevOps workflows.
• Deep knowledge of Google Cloud Platform (GCP) services in modern cloud-native deployments.
• Familiarity with SaaS architectures, identity systems, and integration patterns.
• Bonus: threat intelligence, security research, vulnerability analysis; Kubernetes/containers; scripting for automation.
• Experience in fast-paced, cloud-native, or AI/ML-driven environments.

Responsibilities

• Architect, expand, and maintain the security data lake and detection rules to maximize threat coverage.
• Monitor emerging threats and rapidly assess applicability to Replit's infrastructure, SaaS services, and platform components.
• Conduct targeted investigations using SIEM, Cloud Logging, and telemetry to identify gaps and improve detections.

Skills

Security data lake

Telemetry engineering

SIEM

Infrastructure as code

Detection engineering

Cloud security

GCP

CI/CD

Software engineering fundamentals

DevOps

Cloud-native security

Threat intelligence

Kubernetes

Containers

Python

Go

Bash

Tools

Kubernetes

Containers

Python

Go

Bash

CI/CD tooling

Job description

Replit is seeking a SOC Engineer to join our Security Operations team. You will build and evolve the security data lake, engineer telemetry, and own high-fidelity detection end-to-end across our cloud-native platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor threats, and translate incidents into automated defenses. This hands-on role requires deep software engineering, CI/CD experience, and strong cloud security skills in GCP.