SOC Engineer

Replit is seeking a SOC Engineer to join its Security Operations team. The successful candidate will help defend a fast-moving, cloud-native AI platform.

The role involves building and evolving a security data lake, engineering reliable security telemetry, and owning high-fidelity detection engineering end-to-end. The ideal candidate will unify cloud, identity, endpoint, and application telemetry, stay on top of emerging threats, and rapidly build and tune detections across the environment.

Responsibilities:

• Security Data Lake & Detection Engineering: Architect, expand, and maintain the security data lake while designing, testing, and tuning custom detection rules.
• Threat Awareness & Rapid Assessment: Continuously monitor emerging threats and rapidly assess their applicability to Replit's infrastructure.
• Investigation & Impact Analysis: Conduct targeted investigations to determine impact and identify gaps in detection/visibility.

Requirements:

• Hands-on experience with SIEM, Cloud Logging, and log-based investigation workflows.
• Expertise in detection engineering end-to-end, specifically developing, testing, and tuning custom detection rules.
• Strong understanding of software engineering fundamentals and CI/CD pipelines.
• Solid knowledge of cloud architecture, especially Google Cloud Platform (GCP) services.

Benefits:

• Competitive Salary & Equity
• 401(k) Program with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays
• Commuter Benefits (In-Office & US Only)
• Monthly Wellness Stipend
• Autonomous Work Environment
• In Office Set-Up Reimbursement (In-Office Only)
• Quarterly Team Gatherings
• In Office Amenities (In-Office Only)