Software Systems Engineer - Security

The Product Security team is responsible for conducting structured security analyses of Zoox products and applying security standards judiciously throughout the System Development Life Cycle at Zoox. The ideal candidate for this team will have a robust background in systems engineering, coupled with a demonstrated passion and expertise in cybersecurity. In this role, you will: Perform Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions. Drive verification of quantified risks by fuzzing real world scenarios in simulator environments. Write design proposals and drive execution while proactively communicating risks to partner teams. Proactively identify opportunities to roll up risk metrics into various company wide frameworks. Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints a

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening. Responsibilities Incident Response Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. Communicate incident status, impact, and risk clearly to technical and executive audiences. Participate in and help shape the security on-call rotation. Investigation & Forensics Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whethe

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world. As the Cloud Security Lead , you will shape the cloud and infrastructure security program that protects millions of developers, enables safe AI-assisted development, and ensures organizations can confidently bring our platform into enterprise environments. In this role, you will own cloud security across GCP (primary) and supplemental environments in AWS and Azure , as well as containerized systems, SaaS platforms, and our multi-tenant AI infrastructure. You’ll improve our security posture through strong architecture, posture management, secure-by-default development practices, and close partnership with Engineering, Compliance, Security Architecture, and Platform teams. This is a highly impactful, hands-on leadership role—perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams. What You’ll Do: Cloud Security Engineering Lead configuration hardening across GCP , with additional oversight of workloads and integrations running in AWS and Azure . Own and optimize CSPM platforms across multi-cloud environments—establishing configuration baselines, guardrails, and remediation workflows. Secure critical SaaS platforms , ensuring proper configurations, access controls, and engineering integrations. Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services. Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity. Assess secure logging configurations across c

As a Technical Lead on Zoox's internal agentic platform, you will own end-to-end integration of a tool-centric agent runtime with external and internal agent clients, line of business backends, scheduled and interactive agent workloads, and cloud operations (Kubernetes, observability, secrets management). You will translate architecture and security intent into stable tool contracts, testable integration milestones, and repeatable releases, and you will be the primary engineer when issues sit at the boundary between product surfaces, platform services, and upstream systems. This role is platform and service integration for an agentic framework that mediates tools (discovery, invocation, policy, and telemetry). Success is measured by reliable tool call paths over HTTP, correct authentication and scoping, environment parity from dev through production, and clear ownership across partner engineering, security, and infrastructure teams. In this role, you will: Own and lead integration strategy and execution across hosted services, shared libraries, standardized tool protocols (e.g., JSON-RPC over HTTP), REST APIs, and diverse callers (vendor agents, consoles, automation workers). Drive cross-functional delivery with backend API teams, partner agent owners, security, SRE/platform, and program management, ensuring formal sign-off where required. Debug and root-cause complex failures using structured logs, distributed traces, metrics, and gateway/session-token behavior, documenting durable mitigations and runbooks. Define and review all integration artifacts (contracts, allowlists, registry config, environment matrices, and interface assumptions) that upstream and downstream teams implement against. Contribute to release gating by ensuring container image promotion, configuration/secrets posture, smoke path execution for high-traffic flows, and disciplined branching/tagging for production inte

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg