RefolkCandidates
JobsBuild my resume

Security Engineer - Vuln Management (Infra)

Replit · Foster City, CA

$210k - $270k/yrRemoteMid levelEngineeringITSecurityPosted 2 months ago
Apply with a tailored resumeView the original posting

About this role

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. WHAT YOU'LL DO CORE RESPONSIBILITIES - Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. - Posture Management & Visibility: Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. - Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. - Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build automate

Excerpt from the posting Replit published. Read the full description on their site before applying.

Skills this posting mentions

Identity & Access Management (IAM)OrchestrationAutomation

About Replit

We’re on a mission to make programming collaborative, accessible, and fun for everyone. Creating the future of computing is a team effort, though

All 88 openings at Replit

Apply to this role, tailored

Queue Security Engineer - Vuln Management (Infra) at Replit and I will read the posting, rewrite your resume against it, draft the cover letter, and score the fit before you send anything.

Applications finish as drafts. Nothing is sent until you read it and press send. New accounts start with 500 free credits.

Tailor my applicationHow it works

More roles at Replit

See all

Similar roles elsewhere

See more

Listed from the job board Replit publishes. Refolk is not the employer and does not handle their hiring. Applications go to Replit directly.