SOC Engineer: Cloud Security & Detection (Remote)

Applied Methods Ltd; Foster City (CA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) with match

Health/Dental/Vision

PTO + Holidays

Commuter benefits

Wellness stipend

Autonomous work environment

In-office setup reimbursement

Team gatherings

Job summary

Replit is seeking a SOC Engineer to join the Security Operations team in Foster City, CA with remote flexibility. You will architect and evolve our security data lake, engineer reliable telemetry, and own high-fidelity detections end-to-end.

This hands-on role requires CI/CD, IaC, and deep cloud-native security know-how. You will monitor emerging threats, run log-based investigations, and support incident response to translate threats into stronger automated defenses across cloud, identity,

Qualifications

• Experience building and evolving a security data lake with unified telemetry (cloud, identity, endpoint, and application).
• Strong background in detection engineering: developing, testing, and tuning custom rules to maximize coverage and reduce noise.
• Hands-on experience with SIEM, Cloud Logging, log-based investigations, and incident response workflows.
• Familiarity with cloud-native deployments, CI/CD, IaC, and modern DevOps practices.
• Knowledge of Google Cloud Platform (GCP) and cloud security architectures; familiarity with containers/Kubernetes is a plus.

Responsibilities

• Architect and maintain a security data lake and detection pipelines to maximize threat coverage.
• Develop, test, and tune custom detection rules across cloud, identity, endpoint, and SaaS environments.
• Support incident investigations by analyzing logs and telemetry and translating findings into automated defenses.
• Collaborate on security automation and instrumentation using infrastructure-as-code and CI/CD practices.

Job description

Replit is seeking a SOC Engineer to join the Security Operations team in Foster City, CA with remote flexibility. You will architect and evolve our security data lake, engineer reliable telemetry, and own high-fidelity detections end-to-end.

This hands-on role requires CI/CD, IaC, and deep cloud-native security know-how. You will monitor emerging threats, run log-based investigations, and support incident response to translate threats into stronger automated defenses across cloud, identity,