SOC Engineer - Cloud-Native Security & Threat Detection

Replit; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Salary & Equity

401k Match

Health/Dental/Vision

Disability Insurance

Parental & Medical Leave

Flexible Time Off

Commuter Benefits

Wellness Stipend

Autonomous Work Environment

Office Setup Reimbursement

Quarterly Team Gatherings

Office Amenities

Job summary

Replit is seeking a SOC Engineer to join our Security Operations team. You will build and evolve a security data lake, engineer reliable telemetry, and own high-fidelity detection end-to-end across our cloud-native AI vibe-coding platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor emerging threats, and support incident investigations. The role requires hands-on engineering, strong CI/CD and cloud-native experience, especially with GCP.

Qualifications

• Hands-on experience building/maintaining security data lakes and unifying telemetry across cloud, identity, endpoint and app layers.
• Expertise in detection engineering end-to-end: developing, testing and tuning custom rules to maximize coverage while reducing noise.
• Strong software engineering fundamentals (code structure, builds, dependencies, packaging) and familiarity with CI/CD workflows.

Responsibilities

• Architect, expand, and maintain the security data lake and detection rules to maximize threat coverage and minimize noise across the cloud-native stack.
• Continuously monitor emerging threats and rapidly assess their applicability to the company’s infrastructure and services.
• Conduct targeted investigations using SIEM, Cloud Logging, and telemetry to identify gaps and improve visibility and defenses.
• Develop and deploy automation and infrastructure-as-code to close visibility gaps and streamline investigations.

Skills

Security Data Lake

SIEM & Cloud Logging

Detection Engineering

Infrastructure as Code

Cloud: GCP

CI/CD & DevOps

Programming: Python/Go

Kubernetes

Tools

Terraform

Job description

Replit is seeking a SOC Engineer to join our Security Operations team. You will build and evolve a security data lake, engineer reliable telemetry, and own high-fidelity detection end-to-end across our cloud-native AI vibe-coding platform.

You will unify cloud, identity, endpoint, and application telemetry, monitor emerging threats, and support incident investigations. The role requires hands-on engineering, strong CI/CD and cloud-native experience, especially with GCP.