Remote AWS Cloud Security Engineer - Incident Response

Tripadvisor; Kraków; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Remote-friendly work

Flexible schedule

Tuition assistance

Travel perks

Health benefits

Job summary

Tripadvisor is seeking a security-focused engineer to join our Product Security team. You will monitor and respond to security incidents across our AWS-based production environment, while triaging vulnerabilities from external sources and collaborating with engineering to secure code and infrastructure.

You will build automated security monitoring, tune security tools, and drive secure coding practices across our global team, with flexible remote work and opportunities to join on-site as needed.

Qualifications

• Hands-on experience securing production in AWS and familiarity with core services (GuardDuty, Security Hub, WAF, CloudTrail).
• Understanding of AWS services beyond security tools (VPC, EC2, RDS, S3, Lambda, EKS).
• Proficiency with Terraform for managing and securing cloud infrastructure.
• Proven lifecycle experience of security incidents from detection to post-mortem.
• Scripting skills to automate security operations and analysis tasks.
• Solid knowledge of OWASP Top 10 and defensive coding practices.

Responsibilities

• Monitor, analyze, and investigate security alerts from AWS, logs, and security tooling.
• Respond to incidents impacting the Tripadvisor Experiences application.
• Triage vulnerabilities from bug bounty programs and external sources.
• Build and maintain security monitoring and alerting in production.
• Automate security ops tasks to improve detection and response times.
• Configure and manage WAF, GuardDuty, and Security Hub.

Skills

AWS Security Operations

AWS Cloud Infrastructure

Infrastructure as Code

Incident Response

Scripting (Python, Go, Bash)

Application Security Fundamentals

AI for Security

Global-first mindset

Job description

Tripadvisor is seeking a security-focused engineer to join our Product Security team. You will monitor and respond to security incidents across our AWS-based production environment, while triaging vulnerabilities from external sources and collaborating with engineering to secure code and infrastructure.

You will build automated security monitoring, tune security tools, and drive secure coding practices across our global team, with flexible remote work and opportunities to join on-site as needed.