Cloud Security Lead

Join Replit, a leading developer platform, as the Cloud Security Lead. In this hands-on leadership role, you will shape the cloud and infrastructure security program, protect millions of developers, and enable safe AI-assisted development. You will own cloud security across GCP, AWS, Azure, and containerized systems, and work closely with engineering, compliance, security architecture, and platform teams. This position offers a flexible remote work environment, competitive benefits, and the opportunity to solve complex security challenges at scale.

• Lead the development and implementation of the cloud and infrastructure security program, ensuring the protection of millions of developers and enabling safe AI-assisted development.
• Own and optimize Cloud Security Posture Management (CSPM) platforms across multi-cloud environments, establishing configuration baselines, guardrails, and remediation workflows.
• Collaborate with engineering teams to embed security into development workflows, CI/CD pipelines, and cloud-native deployments, ensuring services are secure by default.

• Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.)
• Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging)
• Working knowledge of AWS and/or Azure security services and configurations
• Operational experience with infrastructure vulnerability management across cloud and container environments
• Experience securing and governing SaaS platforms and identity integrations
• Strong IaC security experience with Terraform, Pulumi, or similar tooling
• Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS)
• 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role
• Experience with container and Kubernetes security across GKE, EKS, or AKS
• Experience supporting engineering teams in building secure-first, cloud-native or PaaS environments
• Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services
• Experience in high-growth technology or cloud-native product companies
• Automation/scripting with Python
• Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs)
• Experience with securing AI/agentic systems and sensitive data pipelines