Cloud Security Engineer II (AWS, SecOps)

Tripadvisor; Poland; On-site; PLN 212,494 - 339,991; Full time

Benefits offered by this job

Competitive compensation packages

Flexible schedule

Tuition assistance

Travel perks

Employee assistance program

Health benefits

Job summary

A leading travel and restaurant company is seeking a Cloud Security Engineer II to monitor and secure AWS infrastructure. The role involves incident response, automation through scripting, and collaboration with development teams on secure coding practices. We're looking for candidates with proven AWS security operations experience and proficiency in tools like Terraform and Python. This position is hybrid, offering flexibility for those within 2 hours of Kraków, Poland, along with competitive benefits including travel perks and tuition assistance.

Qualifications

• Hands-on experience securing a production environment in AWS.
• Proficiency in Terraform for managing and securing infrastructure.
• Solid understanding of common web application vulnerabilities.

Responsibilities

• Monitor, analyze, and investigate security alerts from AWS.
• Respond to incidents impacting the Tripadvisor Experiences application.
• Collaborate with engineering teams on secure coding practices.

Skills

AWS Security Operations

Incident Response

Scripting for Automation

Infrastructure as Code

Application Security Fundamentals

Demonstrated ability to use AI tools

Tools

Terraform

Python

Go

Bash

Job description

Cloud Security Engineer II (AWS, SecOps)

Job Location: Kraków, hybrid (open for candidates within 2 hours of Kraków). Permanent contract (umowa o pracę).

What You'll Do:

Product-Focused Incident Response

• Monitor, analyze, and investigate security alerts originating from our AWS infrastructure, application logs, and security tooling (WAF, SIEM, Cloud-Native tools).
• Respond to security incidents that directly impact the Tripadvisor Experiences application, such as potential data breaches, application-layer attacks, or infrastructure compromises.
• Triage vulnerabilities reported through our bug bounty program and other external sources.

Security Engineering & Automation

• Build and maintain security monitoring and alerting capabilities within our production environment.
• Automate security operations tasks using scripting languages like Python or Go to improve our detection and response times.
• Configure, tune, and help manage security tools like our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub.

Vulnerability Management & Collaboration

• Operationalize findings from application security tools (SAST, DAST, SCA) by working with engineering teams to prioritize and remediate vulnerabilities in our codebase and dependencies.
• Conduct threat modeling for new features to identify and mitigate risks before they reach production.
• Collaborate with engineering teams and provide guidance on secure coding practices and architecture.

Skills & Experience

• AWS Security Operations: Hands‑on experience securing a production environment in AWS. Comfortable with its core security services (e.g., GuardDuty, Security Hub, WAF, CloudTrail).
• AWS Cloud Infrastructure: Good understanding of core AWS services beyond just security tools (e.g., VPC networking, EC2, RDS, S3, Lambda, EKS). Capable of understanding and spinning up a full infrastructure stack to effectively secure it.
• Infrastructure as Code: Proficiency with Terraform for managing and securing cloud infrastructure. Able to read, write, and review Terraform code, ensuring that the infrastructure you define is secure by design.
• Incident Response: Proven experience with the full lifecycle of security incidents, from initial detection and analysis to containment, remediation, and post‑mortem.
• Scripting for Automation: Proficiency in at least one scripting language (e.g., Python, Go, Bash) to automate security operations and analysis tasks.
• Application Security Fundamentals: Solid understanding of common web application vulnerabilities (OWASP Top 10) and how to defend against them.
• Demonstrated ability to use AI tools: to improve efficiency, quality, and decision‑making in day‑to‑day work.
• Proven ability to operate effectively with a global-first mindset.

What We Offer:

• Competitive compensation packages (including base salary and annual bonuses).
• "Work your way" with flexibility to suit your lifestyle. Tripadvisor Group takes a remote‑friendly approach to collaboration across a worldwide team, with the option to join on-site as often as you’d like or as required by your team.
• Flexible schedule. Work‑life balance is ingrained in our culture by design. Trust and accountability make it work.
• Donation matching. Give back? Give more! We match qualifying charitable donations annually.
• Tuition assistance. Want to level up your career? We love to hear it! Receive annual support for qualified programs.
• Lifestyle benefit. An annual benefit to spend on yourself. Use it on travel, wellness, or whatever suits you.
• Travel perks. We believe that travel is employee development, so we provide discounts and more.
• Employee assistance program. We’re here for you with resources and programs to help you through life’s challenges.
• Health benefits. We offer great coverage and competitive premiums.

We strive to create an accessible and inclusive experience for all candidates. If you need a reasonable accommodation during the application or the recruiting process, please reach out to our Accessible Recruiting team.