{"id":4003739,"url":"https://alion.io/job/replit-soc-engineer","title":"SOC Engineer","company":{"id":2425,"name":"Replit","domain":"replit.com","url":"https://alion.io/company/replit","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":21,"ghost_share":0.048,"stale_share":0.286,"repost_share":0.048,"time_to_fill_p50_days":77,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Hardware","role_family":"Hardware","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Foster City, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":250000,"max":374000,"currency":"USD","period":"year","gross":null,"usd_annual":374000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Replit","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-10T01:00:08Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T05:39:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.\nAbout the role:\nWe are looking for a SOC Engineer to join our Security Operations team and help defend a fast-moving, cloud-native AI vibe-coding platform. In this role, your primary mandate will be building and evolving our security data lake, engineering reliable security telemetry, and owning high-fidelity detection engineering end-to-end. You will unify cloud, identity, endpoint, and application telemetry, staying on top of emerging threats to rapidly build and tune detections across our environment. Alongside this data and detection mandate, you will support incident investigations as needed to translate real-world threats into stronger automated defenses. This is a hands-on engineering role requiring strong technical depth, understanding of modern software engineering and CI/CD systems, familiarity with cloud-native infrastructure (especially GCP), and expertise in security data pipelines and detection workflows.\nWhat You'll Do:\nSecurity Data Lake & Detection Engineering: Architect, expand, and maintain our security data lake while designing, testing, and tuning custom detection rules to maximize threat coverage and minimize noise across our cloud-native stack.\n\nThreat Awareness & Rapid Assessment: Continuously monitor emerging threats (0-days, bad actor activity, public exploitation campaigns, bug bounty reports, customer security issues) and rapidly assess their applicability to Replit's infrastructure, SaaS services, internal tools, and platform components.\n\nInvestigation & Impact Analysis: Conduct targeted investigations to determine impact, analyze logs, telemetry, and system behaviors using SIEM, metrics, and Cloud Logging and identify gaps in detection/visibility.\n\nRequired Skills & Experience:\nBuilding and evolving the security data lake, unifying cloud, identity, endpoint, and application telemetry; hands-on experience with SIEM, Cloud Logging, and log-based investigation workflows.\n\nEngineering reliable security infrastructure and automation using infrastructure-as-code to close visibility gaps and perform log-based investigations.\n\nProven expertise in detection engineering end-to-end, specifically developing, testing, and tuning custom detection rules to maximize threat coverage and reduce noise across complex environments.\n\nStrong understanding of software engineering fundamentals (code structure, build systems, dependencies, package ecosystems).\n\nUnderstanding of CI/CD pipelines and DevOps workflows.\n\nSolid knowledge of cloud architecture, especially Google Cloud Platform (GCP) services in modern cloud-native deployments.\n\nFamiliarity with SaaS architectures, identity systems, and integration patterns.\n\nBonus Qualifications:\nExperience with threat intelligence, security research, or vulnerability analysis.\n\nFamiliarity with Kubernetes, containers, serverless infrastructure, or modern distributed systems.\n\nAbility to write scripts or small tools for investigation or automation (Python, Go, Bash).\n\nExperience working with bug bounty programs or coordinated vulnerability disclosure workflows.\n\nExperience in fast-paced, cloud-native, or AI/ML-driven environments.\n\nFull-Time Employee Benefits Include:\nCompetitive Salary & Equity\n401(k) Program with a 4% match (US Only)\nHealth, Dental, Vision and Life Insurance\nShort Term and Long Term Disability\nPaid Parental, Medical, Caregiver Leave\nFlexible Time Off (FTO) + Holidays\nCommuter Benefits (In-Office & US Only)\nMonthly Wellness Stipend\nAutonomous Work Environment\nIn Office Set-Up Reimbursement (In-Office Only)\nQuarterly Team Gatherings\nIn Office Amenities (In-Office Only)\nWant to learn more about what we are up to?\nSelf-driving Company\n\nReplit Agent at Scale\n\nAI Adoption\n\nBuild Open-Source Apps\n\nInterviewing + Culture at Replit\nOperating Principles\n\nReasons not to work at Replit\n\nTo achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.","description_format":"text","description_chars":4420,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Code Intelligence","AI Development Tools","Website Builders"],"lifecycle":[{"event":"open","at":"2026-11-10T05:39:30Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 29 · green card filings: 1","filings_12m":29,"filings_prev_12m":5,"green_card_filings_12m":1,"median_offered_wage_usd":201833,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":77,"reasons":["conf:1","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":374000,"is_top_pay":true},"html_url":"https://alion.io/job/replit-soc-engineer","json_url":"https://alion.io/job/replit-soc-engineer.json","meta":{"generated_at":"2026-11-10T08:51:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2425},"rest":"https://alion.io/mcp/rest/get_company?id=2425"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freplit-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freplit-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freplit-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/replit-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freplit-soc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4003739}},{"tool":"search_jobs","arguments":{"company":"replit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4003739},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}