Senior Cloud Security Engineer (Experiences)

Tripadvisor; Lisboa; Presencial; EUR 60 000 - 80 000; Tempo integral

Resumo da oferta

A leading travel marketplace in Portugal is seeking a Senior Cloud Security Engineer who will focus on security operations and incident response within AWS environments. This remote position requires hands-on experience with AWS security services, infrastructure automation using Terraform, and scripting skills. As a key player, you will monitor security alerts, manage vulnerabilities, and provide guidance on secure coding practices. This full-time role offers a mid-senior level opportunity in a growing technology sector.

Qualificações

• Deep hands-on experience securing a production environment in AWS.
• Comprehensive understanding of core AWS services.
• Strong proficiency with Terraform for managing infrastructure.
• Proven experience managing security incidents.
• Proficiency in at least one scripting language.

Responsabilidades

• Monitor, analyze, and investigate security alerts.
• Lead response to security incidents impacting the application.
• Build and maintain security monitoring capabilities.
• Operationalize findings from application security tools.
• Conduct threat modeling for new features.

Conhecimentos

AWS Security Operations

AWS Cloud Infrastructure

Infrastructure as Code

Incident Response

Scripting for Automation

Application Security Fundamentals

Ferramentas

Terraform

Python

Go

Bash

Descrição da oferta de emprego

Senior Cloud Security Engineer

Viator, a Tripadvisor company, is the leading marketplace for travel experiences. We believe that making memories is what travel is all about. And with 300,000+ travel experiences to explore—everything from simple tours to extreme adventures (and all the niche, interesting stuff in between)—making memories that will last a lifetime has never been easier. With industry‑leading flexibility and last‑minute availability, it’s never too late to make any day extraordinary.

Viator is a remote‑first company. This role is based remotely in Portugal / Poland.

Key Responsibilities

Product‑Focused Incident Response

• Monitor, analyze, and investigate security alerts originating from our AWS infrastructure, application logs, and security tooling (WAF, SIEM, Cloud‑Native tools).
• Lead the response to security incidents that directly impact the Viator application, such as potential data breaches, application‑layer attacks, or infrastructure compromises.
• Manage and triage vulnerabilities reported through our bug bounty program and other external sources.

Security Engineering & Automation

• Build and maintain security monitoring and alerting capabilities within our production environment.
• Automate security operations tasks using scripting languages like Python or Go to improve our detection and response times.
• Configure, tune, and manage security tools like our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub.

Vulnerability Management & Collaboration

• Operationalize findings from application security tools (SAST, DAST, SCA) by working with engineering teams to prioritize and remediate vulnerabilities in our codebase and dependencies.
• Conduct threat modeling for new features to identify and mitigate risks before they reach production.
• Act as a security subject matter expert for our product and engineering teams, providing guidance on secure coding practices and architecture.

What You’ll Bring

Required Experience (Must‑Haves)

• AWS Security Operations: Deep, hands‑on experience securing a production environment in AWS. You must be comfortable with its core security services (e.g., GuardDuty, Security Hub, WAF, CloudTrail).
• AWS Cloud Infrastructure: Comprehensive understanding of core AWS services beyond just security tools (e.g., VPC networking, EC2, RDS, S3, Lambda, EKS). You must be capable of understanding and spinning up a full infrastructure stack to effectively secure it.
• Infrastructure as Code: Strong proficiency with Terraform for managing and securing cloud infrastructure. You should be able to read, write, and review Terraform code, ensuring that the infrastructure you define is secure by design.
• Incident Response: Proven experience managing the full lifecycle of security incidents, from initial detection and analysis to containment, remediation, and post‑mortem.
• Scripting for Automation: Proficiency in at least one scripting language (e.g., Python, Go, Bash) to automate security operations and analysis tasks.
• Application Security Fundamentals: A solid understanding of common web application vulnerabilities (OWASP Top 10) and how to defend against them.

Seniority level: Mid‑Senior level

Employment type: Full‑time

Job function: Information Technology

Industries: Software Development, Technology, Information and Internet, and Travel Arrangements