Engineering Manager, Security (Cloud, Infrastructure & Application Security)

Replit is seeking an Engineering Manager, Security to lead teams responsible for cloud and infrastructure security, application security, and secure SDLC. The role focuses on driving vulnerability remediation across cloud, infrastructure, and code to meet compliance obligations (SOC 2, ISO 27001, PCI DSS, FedRAMP). The manager will build and mentor a team, define roadmap, own remediation SLAs, and partner with engineering teams. Requires deep cloud security knowledge (GCP, AWS, Azure), DevSecOps

8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers. Deep hands-on knowledge of cloud security in GCP plus AWS/Azure. Proven track record running vulnerability management at scale. Hands-on with CSPM/CNAPP (Wiz, Orca, etc.) and SCA/SAST/IaC tools (Snyk, Semgrep, etc.). Strong Kubernetes and container security. Secure SDLC program experience. Ability to write code (Python, Go, TypeScript). Understanding of compliance frameworks (SOC 2, IS