Senior Infrastructure Security Engineer — Cloud & Compliance

WeTravel; Amsterdam; Remote; EUR 85,000 - 125,000; Full time

Benefits offered by this job

Competitive salary

Time to Recharge

Work From Anywhere

Onboarding program

Annual team off-site

Cycle-to-work or commuting

Job summary

WeTravel seeks an experienced security engineer to own vulnerability management across our infrastructure and cloud footprint. You will prioritize remediation using risk signals, automate security workflows, and build robust telemetry while coordinating with product, platform and IT teams.

The role emphasizes SOC 2 and PCI DSS controls, with work from anywhere as part of our flexible policy. You will shape the detection foundation, drive incident response readiness, and collaborate with

Qualifications

• 8+ years in security engineering with depth in operations.
• Experience with AWS, Kubernetes, and infrastructure as code.
• Expertise in security logging, SIEM tooling, and managed detection services.
• Hands-on infrastructure vulnerability management at scale.
• Experience with SOC 2 and PCI DSS controls.

Responsibilities

• Own infrastructure vulnerability management across dependencies, containers, images and cloud infra.
• Prioritize remediation using KEV/EPSS, asset criticality, and access controls.
• Automate security workflows: scanners, pipelines, ticket routing and reporting.
• Build security telemetry coverage and ensure detectable, retained logs.
• Lead cloud security posture management and incident response readiness.
• Coordinate cross-team remediation and provide evidence for audits.

Skills

Security operations

Cloud security

Detection engineering

Incident response

AWS

Kubernetes

SIEM tooling

SOC 2

PCI DSS

Tools

SIEM

Job description

WeTravel seeks an experienced security engineer to own vulnerability management across our infrastructure and cloud footprint. You will prioritize remediation using risk signals, automate security workflows, and build robust telemetry while coordinating with product, platform and IT teams.

The role emphasizes SOC 2 and PCI DSS controls, with work from anywhere as part of our flexible policy. You will shape the detection foundation, drive incident response readiness, and collaborate with