Senior Application Security Engineer — Lead & Mentor Remote

Tripadvisor; Oxford; Hybrid; GBP 100,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Remote-friendly

Tuition assistance

Travel perks

Employee assistance program

Annual bonus

Job summary

Tripadvisor seeks an experienced Senior Application Security Engineer to lead security across our Experiences platform, designing advanced security measures, mentoring engineers, and embedding secure development practices.

Based in Oxford, UK, this permanent role offers a remote-friendly hybrid model with on-site collaboration as needed. You will partner with product and engineering teams to protect our travel platform and ensure secure releases.

Qualifications

• Extensive experience in application security, including threat modelling, vulnerability assessments, and incident response.
• Hands-on experience with security testing tools (SAST/DAST) and CI/CD pipelines.
• Strong understanding of encryption, secure software design, identity management, and API security.

Responsibilities

• Lead the design and implementation of advanced application security measures, including encryption and identity management.
• Conduct threat modelling and risk assessments to identify and mitigate security risks.
• Perform manual security assessments including code reviews and security incident investigations.
• Act as SME for security breaches, root cause analyses and remediation actions.
• Develop and enforce security policies across engineering teams.

Skills

Threat modelling

SAST/DAST

Cloud security

Security architecture

Mentoring

Security testing

Encryption

Identi ty management

Tools

SAST tools

DAST tools

CI/CD security tooling

AWS/Azure security

Job description

Tripadvisor seeks an experienced Senior Application Security Engineer to lead security across our Experiences platform, designing advanced security measures, mentoring engineers, and embedding secure development practices.

Based in Oxford, UK, this permanent role offers a remote-friendly hybrid model with on-site collaboration as needed. You will partner with product and engineering teams to protect our travel platform and ensure secure releases.