Security Engineer - Vuln Management (Infra)

Replit, Foster City, CA

The role

We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks.

All jobs

Security Engineer - Vuln Management (Infra)

Replit, Foster City, CA

Posted pay

$210K–$270K

a year

Compared with similar jobs

This base pay is above the median for security engineering jobs in the Bay Area with no level in the job title.

Median: $210K a year
Other jobs in the group: 230

We compare the middle of each posted range. This is base pay as posted. The group does not include this job.

Location: Foster City, CA
Work type: Hybrid
Level: Not given
Experience: 5+ years
Skills in the job text: AWS
Kubernetes
GCP
Azure
Docker
Terraform
Posted: May 26, 2026
Last check: 1 h ago
Job type: Security engineering, Infra, platform & SRE

Apply on the Replit site Sign in to save

The Replit site opens in a new tab.

Replit

Open tech jobs: 18
With posted pay: 100%
Median posted base: $240K–$325K

About Replit: funding, hiring and pay

Replit

About Replit: funding, hiring and pay

Company facts

Money raised: $851MSum of funding rounds on record
Newest round: Series DMar 11, 2026

Funding records can have errors and can be missing. The company page has the links.

Check my fit

Compare your résumé with this job. See where you match, what is missing and which lines to change.

The role

What you will do

Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure.
Posture Management & Visibility: Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines.
Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production.
Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build automated base-image patching and rolling upgrade pipelines.
Compliance-Driven Tracking: Track, document, and manage infrastructure vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of infrastructure remediation timelines and exception approvals.
Executive Reporting & Alerting: Escalate and report critical production exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize infrastructure risk trends and cloud compliance posture.
Remediation Collaboration: Partner with SRE, DevOps, and Platform teams to provide clear infrastructure mitigation paths. Assist in writing, reviewing, or modifying cloud configuration templates directly when necessary to resolve security flaws.
Incident Response Support: Assist Incident Response teams during active cloud or host-level breaches. Help develop and implement immediate, real-time cloud, network, or IAM configuration countermeasures to contain threats.

Security Engineer - Vuln Management (Infra)

The role

Security Engineer - Vuln Management (Infra)

The role

What you will do

What you need

What we value

Competitive Salary & Equity

In Office Amenities (In-Office Only)

Interviewing + Culture at Replit

About Replit

Similar jobs at other companies

Senior Security Engineer - US

Site Reliability Engineer