Jobs in the United States

Group jobs by employerEmail me new jobs Save this search

Added 3 days ago
Project Manager - AMS - REMOTE
NTT DATA Services, LLC
Plano
We are seeking an experienced Project Manager to lead the steady-state delivery of Application Management Services (AMS) across a diverse Business Services Applications Portfolio. The role…
Added 3 days ago
R
Engineering Manager, Security (Cloud, Infrastructure & Application Security)
Replit
Foster City, CA
- $250,000 to $387,000 USD / year
We are looking for an Engineering Manager, Security to lead the teams that secure our cloud, our infrastructure, and the code we ship. You will manage two closely linked groups:
Added 3 days ago
Coating and Corrosion Control - Project Manager- Washington D.C
Serco USA
Alexandria, VA · Arlington, VA · Chantilly, VA · Crystal City, VA · Fairfax, VA · Falls Church, VA · Fredericksburg, VA · Gainesville, VA · Herndon, VA · Langley AFB, VA · Manassas, VA · McLean, VA · Norfolk, VA · Quantico, VA · Reston, VA · Rockville, MD · Rosslyn, VA · Springfield, VA · Vienna, VA · Virginia Beach, VA · Washington Navy Yard, DC
The Submarine Industrial Base (SIB) Program leads the U.S. Navy's effort to revitalize America's shipbuilding and repair capabilities. Established in September 2024, the program strengthens…
Added 3 days ago
Software Engineer - Risk Systems
Regions Bank
Birmingham, AL · Charlotte, NC · Atlanta, GA
Familiarity with common software design and integration concepts.
Added 3 days ago
GC
Senior IT Program Manager
Gunnison Consulting Group
Washington, DC
- $190,000 to $210,000 USD / year
Serve as the accountable senior leader for a complex, multi-year VA enterprise modernization and systems-integration program.
Added 3 days ago
O
Program Manager, M&A Recruiting | People
OpenAI
San Francisco, CA
- $216,000 to $240,000 USD / year
As a Mergers & Acquisitions Program Manager within Recruiting, you’ll be a key partner in leading the people-side workstream on M&A deals, from diligence through employee onboarding. This…
Added 3 days ago
Senior Manager - Cybersecurity Compliance
CVS Shared Services Resources LLC
Remote, United States
The Senior Manager of Cybersecurity Compliance will lead and execute strategic initiatives related to Regulatory Compliance for CVS Health’s Enterprise Information Security team, guiding…
Added 3 days ago
Commercial Project Manager
Generac Power Systems Inc
Sussex, WI
In the role of Project Manager, you will be part of the Energy Integration team, leading project management for our customers, focusing on energy integration solutions featuring our energy…
Added 3 days ago
Key Solutions Architect, Prompt
SentinelOne
United States
…cybersecurity strongly preferred, in roles such as Technical Account Manager, Professional Services Consultant, Customer Success Engineer, or…
Added 3 days ago
Acquisition Manager, Senior
COLSA Corporation
Dayton, OH
We are seeking an Acquisition Manager, Senior to join our team in Dayton, OH in the C-130J program office. Candidate will demonstrate an understanding of DoD acquisition processes, and…
Added 3 days ago
Acquisition Logistician, Senior
COLSA Corporation
Bedford, MA
…will be integral in the standup for the Looking Glass Next program performing various tasks related to the planning, development, implementation and management of a comprehensive,…
Added 3 days ago
Advocate/Case Manager - IDYCA
Idaho Division of Human Resources
Pierce, ID
(1) Must have and maintain a valid and unrestricted state issued driver’s license (from any state) · (4) Must possess and provide documentation validating the following education and experience
Added 3 days ago
Cadre Team Leader - IDYCA
Idaho Division of Human Resources
Pierce, ID
(1) Must have and maintain a valid and unrestricted state issued driver’s license (from any state) · (4) Must possess and provide documentation validating the following education and experience
Added 3 days ago
AI
Benefits Manager
AppFolio Inc
San Diego, CA · Richardson, TX · Goleta, CA
- $115,000 to $143,000 USD / year
The Benefits Manager is the trusted expert behind one of the most personal aspects of life at AppFolio - the health, financial, and well-being programs that show up for our employees and…
Added 3 days ago
Senior Director - Counter-C5ISRT (Campaign Lead)
LEIDOS, INC.
Alexandria, VA
This leader will serve as Senior Program Manager for initial efforts as they are established, maintaining end-to-end accountability from campaign shaping through execution - ensuring speed,…
Added 3 days ago
Clinical Team Coordinator Registered Nurse- Advanced Acute Care Orthopedic Trauma Unit
GWV Geisinger Wyoming Valley Medical Center
Wilkes-Barre, PA
MyHealth Rewards wellness program to improve your health while earning a financial incentive
Added 3 days ago
Senior Manager, Enterprise Risk Management
Becton, Dickinson and Company
United States
The Senior Manager, Enterprise Risk Management, is a key leader responsible for operating and advancing BD’s global ERM program. Reporting to the Director, ERM, the role will lead…
Added 3 days ago
Per Diem Screener-MSW-PT Days
Mount Sinai Health Systems
New York, NY
5. Informs the new mother about the hearing screening program and answers all questions
Added 3 days ago
Per Diem Screener-MSW-PT Days
Mount Sinai Health Systems
New York, NY
5. Informs the new mother about the hearing screening program and answers all questions
Added 3 days ago
Per Diem Clinical Nurse - 117th Street Dialysis - Mount Sinai Hospital - Flex Shift
Mount Sinai Health Systems
New York, NY
4. Initiates service recovery for patients and family members who have concerns and escalates to Clinical Nurse Manager/Assistant Nurse Manager/Nursing Shift Manager or Patient Relations as…
Added 3 days ago
MS
Clinical Program Manager, Early Phase Clinical Trials Unit (RN or NP Required) - Tisch Cancer Center
Mount Sinai Health Systems
New York, NY
- $115,494 to $192,328 USD / year
The Candidate must have expert knowledge of cancer as a disease process, cancer treatment modalities, and the process of conducting clinical research
Added 3 days ago
Supply Chain & In-Plant Logistics Planning Manager (New Plant Readiness)
Daimler Truck North America LLC
Portland, OR · Detroit, MI · Fort Mill, SC
The Manager, Supply Chain & In-Plant Logistics Planning leads the design, implementation, launch, and stabilization of end-to-end supply chain and in-plant logistics model for DTNA’s new…
Added 3 days ago
Custom Truck Services & Outbound Logistics Planning Manager (New Plant Readiness)
Daimler Truck North America LLC
Portland, OR · Detroit, MI · Fort Mill, SC
Oversight of finished-vehicle inventory, yard operations, carriers, cross-border requirements, and customer handoffs related to CTS functions · Experience with CTS/PDI, vehicle flow, yard operations, carrier management, cross-border transportation, or customer delivery
Added 3 days ago
Senior Test Manager-Tinker AFB
Serco USA
Andrews AFB, MD · Aurora Buckley AFB, CO · Cannon AFB, NM · Columbus AFB, MS · Dyess AFB, TX · Edwards AFB, CA · Eglin AFB, FL · Eielson AFB, AK · Ellsworth AFB, SD · Fairchild AFB, WA · Glendale Luke AFB, AZ · Goodfellow AFB, TX · Grand Forks AFB, ND · Hanscom AFB, MA · Hill AFB, UT · Kirtland AFB, NM · Langley AFB, VA · Laughlin AFB, TX · Little Rock AFB, AR · Maslmstrom AFB, MT · Maxwell AFB-Gunter Annex, AL · McConnell AFB, KS · Minot AFB, ND · Moody AFB, GA · Mountain Home AFB, ID · Nellis AFB, NV · Offutt AFB, NE · Peterson AFB, CO · Robins AFB, GA · Schriever AFB, CO · Scott AFB, IL · Shaw AFB, SC · Sheppard AFB, TX · Tinker AFB, OK · Travis AFB, CA · Vandenberg AFB, CA · Warren AFB, WY · Whiteman AFB, MO · Wright-Patterson AFB, OH
…a great opportunity for you! As a Senior Test & Evaluation Manager, you will be supporting the Air Force Life Cycle Management Center, Special Programs Division (AFLCMC/WAG) at Tinker AFB,…
Added 3 days ago
Sr. Manager Business Systems and Transformation
RTX
Remote, United States
Qualification You Must Have

Replit

Engineering Manager, Security (Cloud, Infrastructure & Application Security)

Foster City, CA, United States

$250,000 to $387,000 USD / year

Apply on jobs.ashbyhq.com About employer

Applications open in a new tab.

Job details

Pay: $250,000 to $387,000 USD / year
Posting language: English
Posted: Nov 9, 2026

Original job description

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.

About the role:

We are looking for an Engineering Manager, Security to lead the teams that secure our cloud, our infrastructure, and the code we ship. You will manage two closely linked groups:

Cloud & Infrastructure Security: engineers who own cloud security posture, configuration hardening, and infrastructure vulnerability management across GCP, AWS, and Azure, plus containers, Kubernetes, and SaaS platforms.
Application Security & Secure SDLC: engineers who run our SCA, SAST, and IaC scanning programs, drive remediation with engineering teams, and deliver secure development training.

The core responsibility of this role is getting vulnerabilities fixed on time. You will partner with engineering teams across the company to drive remediation of cloud, infrastructure, and code findings within SLA, so that we consistently meet our compliance commitments (SOC 2, ISO 27001, PCI DSS, FedRAMP, and customer contracts). You will hire and grow a high-performing team, set the strategy and roadmap for vulnerability management from code to cloud, and make secure-by-default the easiest path for every developer. You will not run incident response yourself, but you need to understand it well enough to support the incident response team with context, prioritization, and follow-up fixes.

What You'll Do:

TEAM LEADERSHIP & STRATEGY

Build, lead, and mentor a team of cloud security, infrastructure vulnerability management, and application security engineers; own hiring, career development, and performance management.
Define the multi-year roadmap and quarterly OKRs for cloud security, vulnerability management, and Secure SDLC, balancing risk reduction against developer velocity.
Set clear ownership, operating rhythms, and on-call/escalation processes across the team.
Report on security posture, risk trends, and program metrics to engineering and executive leadership.

REMEDIATION & COMPLIANCE DELIVERY

Own remediation SLAs by severity across cloud, infrastructure, container, and code findings, and make sure they map to our compliance obligations (SOC 2, ISO 27001, PCI DSS, FedRAMP, customer contracts).
Partner with engineering managers and tech leads to plan, prioritize, and land fixes within SLA without stalling roadmaps.
Run a regular remediation review with engineering leadership: open findings, SLA burn-down, upcoming SLA breaches, and owners.
Manage the exception and risk-acceptance process: documented justification, compensating controls, expiry dates, and approvals.
Build automated workflows that route findings to the right owning team, track them to closure, and escalate before SLAs are breached.
Work with Compliance/GRC to produce audit-ready evidence of remediation timeliness, and lead the security side of external audits for vulnerability management controls.
Track and report metrics such as SLA attainment, mean time to remediate, backlog age, and exceptions, by team and severity.

CLOUD & INFRASTRUCTURE SECURITY

Lead infrastructure vulnerability management across cloud workloads, containers, registries, data stores, and platform services, from scanning and contextual risk triage to remediation workflows.
Oversee configuration hardening and secure baselines across GCP (primary) and supporting AWS and Azure environments.
Own the strategy for Cloud, Kubernetes, and Data Security Posture Management (CSPM, KSPM, DSPM) tooling; make sure findings are accurate, prioritized, and actionable.
Secure critical SaaS platforms with sound configurations, access controls, and integrations.
Partner with Platform and ML Infrastructure teams to secure multi-tenant and AI infrastructure.

APPLICATION SECURITY & CODE SCANNING

Own the SCA, SAST, and IaC scanning programs end to end: tool selection, CI/CD integration, rule tuning, noise reduction, and developer experience.
Drive software supply chain security, including dependency management, SBOMs, artifact signing, and progress through SLSA levels.
Feed code-scanning findings into the central remediation workflow so they reach the owning team automatically and are tracked against SLA.
Shift IaC security left so misconfigurations are caught in pull requests, before they reach production.

SECURE SDLC & DEVELOPER ENABLEMENT

Define and run the Secure SDLC program: security requirements, threat modeling, secure design reviews, and release gates proportionate to risk.
Build and deliver security training, including onboarding, role-based secure coding training, and targeted sessions driven by real vulnerability trends.
Develop paved roads, secure defaults, and guardrails that make the secure path the easiest path for engineers.
Grow a Security Champions network across engineering teams.

INCIDENT RESPONSE PARTNERSHIP & COLLABORATION

Understand the incident response lifecycle well enough to support the IR team: supply asset, exposure, and vulnerability context, and help assess blast radius.
Own follow-up remediation from incidents and postmortems that touch cloud, infrastructure, or code, and track it to closure.
Feed incident learnings back into scanning rules, secure baselines, and developer training.
Collaborate with Security Monitoring/Detection, Incident Response, Offensive Security, PSIRT, Architecture, DevOps, and Platform Engineering.
Help communicate security advisories, best practices, and updates to customers.
Tune into threat intelligence alerts to promptly manage patching of critical, exploitable vulnerabilities.

Required Skills & Experience:

8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers (or 3+ years as a tech lead with formal people-leadership responsibility).
Deep, hands-on knowledge of cloud security in GCP plus working knowledge of AWS and/or Azure: IAM, networking, logging, org policies, and security services.
Proven track record running vulnerability management programs at scale and driving remediation across many engineering teams to meet SLAs, across cloud infrastructure, containers, and application code.
Hands-on experience with CSPM/CNAPP platforms (e.g., Wiz, Orca, Prisma Cloud, Lacework, GCP Security Command Center).
Hands-on experience with SCA, SAST, and IaC scanning tools (e.g., Snyk, Semgrep, CodeQL, Checkmarx, Socket, Dependabot, Checkov, tfsec) and integrating them into CI/CD.
Strong understanding of Kubernetes and container security, and Infrastructure-as-Code (Terraform or similar).
Proven track record of building or maturing a Secure SDLC program, including developer security training.
Ability to write and review code or automation (Python, Go, TypeScript, or similar).
Strong understanding of how remediation SLAs and security controls map to compliance frameworks (SOC 2, ISO 27001, PCI DSS, FedRAMP, CIS, NIST), and experience producing audit evidence.
Working understanding of security incident response in cloud-native environments, enough to partner effectively with IR and detection teams.
Excellent communication skills, with the ability to influence engineering leaders and explain risk in business terms.

Bonus Qualifications:

Experience securing developer platforms, multi-tenant SaaS, or AI/ML infrastructure.
Experience with software supply chain frameworks (SLSA, Sigstore, SBOM standards).
Experience building a Security Champions program or developer-facing security tooling.
Experience leading the security side of external audits (SOC 2 Type II, ISO 27001, PCI DSS, or FedRAMP).
Relevant certifications (e.g., CCSP, GCP Professional Cloud Security Engineer, OSCP, CSSLP), though not required.

Full-Time Employee Benefits Include:

💰 Competitive Salary & Equity

💹 401(k) Program with a 4% match (US Only)

⚕️ Health, Dental, Vision and Life Insurance

🩼 Short Term and Long Term Disability

🚼 Paid Parental, Medical, Caregiver Leave

🏝 Flexible Time Off (FTO) + Holidays

🚗 Commuter Benefits (In-Office & US Only)

📱 Monthly Wellness Stipend

🧑‍💻 Autonomous Work Environment

🖥 In Office Set-Up Reimbursement (In-Office Only)

🚀 Quarterly Team Gatherings

☕ In Office Amenities (In-Office Only)

Want to learn more about what we are up to?

Self-driving Company https://replit.com/blog/self-driving-company
Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
AI Adoption https://replit.com/blog/ai-adoption
Build Open-Source Apps https://replit.com/build/open-source-app-builder

Interviewing + Culture at Replit

Operating Principles https://blog.replit.com/operating-principles
Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit

To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Apply on jobs.ashbyhq.com About employer

More about this job

Skills

Google Cloud
AWS
Microsoft Azure
Kubernetes
Regulatory compliance
Incident response
Prioritization
Team leadership
Performance management
CI/CD
Supply chain management
Workflow
Leadership
Identity and access management
Infrastructure as code
IBM Terraform
Python
Go
TypeScript
Communication skills
ML

Report this job

Work requirements

Jobs in the United States