Cloud Security Engineer II

Socket.dev; Needham (MA); Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Competitive compensation

Remote-friendly

Flexible schedule

Tuition assistance

Travel perks

Health benefits

Referral program

Job summary

Tripadvisor Group is seeking a Cloud Security Engineer II to design and scale security guardrails across our AWS-based cloud environment, with remote-friendly options in the United States. You will partner with DevOps and engineering teams to embed security into CI/CD and ensure secure-by-default infrastructure.

In this role you will implement IaC checks, threat modeling, and incident response support, helping to reduce risk and improve our security posture across multi-account environments.

Qualifications

• 3-5 years hands-on experience in cloud security, DevSecOps, or infrastructure security.
• Deep knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations).
• Strong proficiency in Infrastructure as Code (Terraform) and at least one scripting language (Python, Go, or Bash).
• Container security for Kubernetes/EKS and configuring CI/CD security scanners (GitHub Actions, GitLab CI).
• Knowledge of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
• Familiarity with CIS Benchmarks, NIST CSF, SOC 2.
• Certifications (Preferred): AWS Certified Security - Specialty, CKS, CCSP, or equivalent.
• Experience in travel, experiences, or marketplace businesses.

Responsibilities

• Design, deploy, and enforce scalable cloud security controls across multi-account AWS environments.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools.
• Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Manage CSPM/CNAPP platforms, investigate high-priority alerts, and tune risk scoring.
• Conduct architectural security reviews and threat modeling for new cloud features and integrations.
• Act as a secondary point of contact for cloud security incidents and post-mortem actions.

Skills

Cloud security

AWS security services

Terraform

Scripting (Python/Bash/Go)

Kubernetes security

CI/CD security scanners

Networking & IAM

Tools

Terraform

Job description

The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world's most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and other travel categories. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork

We are seeking a Cloud Security Engineer II to build, automate, and scale security guardrails across our cloud environment (primary focus on AWS, with secondary exposure to Azure and GCP). In this mid-level role, you will move beyond basic alert monitoring to actively design security controls, embed security into CI/CD pipelines, and partner with DevOps and engineering teams to ensure secure-by-default infrastructure.

Location: Needham - MA or Remote - United States

What You'll Do

• Cloud Infrastructure Guardrails: Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments.
• DevSecOps Integration: Embed automated security tools (IaC scanning, SAST, secret detection) directly into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Security Automation: Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools (Terraform, CloudFormation).
• Container & Workload Security: Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Posture Management & Triage: Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring and alert tuning.
• Threat Modeling & Reviews: Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations.
• Incident Escalation: Act as a secondary point of contact for cloud security incidents, assisting with forensic collection, root-cause analysis, and post-mortem actions.

Skills & Experience

• Experience: 3-5 years of dedicated hands-on experience in cloud security, DevSecOps, or infrastructure security engineering.
• Cloud Expertise: Deep working knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations).
• IaC & Code: Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash).
• Container & Pipeline Security: Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners (e.g., GitHub Actions, GitLab CI).
• Networking & Identity: Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
• Compliance & Frameworks: Familiarity with mapping cloud controls to industry frameworks (CIS Benchmarks, NIST CSF, SOC 2).
• Certifications (Preferred): AWS Certified Security - Specialty, Certified Kubernetes Security Specialist (CKS), CCSP, or equivalent.
• Experience in travel, experiences, or marketplace businesses.

What We Offer

• Competitive compensation packages (routinely benchmarked against the latest industry data), including base salary and annual bonuses
• "Work your way" with flexibility to suit your lifestyle. Tripadvisor Group takes a remote-friendly approach to collaboration across a worldwide team, with the option to join on-site as often as you'd like or as required by your team.
• Flexible schedule. Work-life balance is ingrained in our culture by design. Trust and accountability make it work.
• Donation matching. Give back? Give more! We match qualifying charitable donations annually.
• Tuition assistance. Want to level up your career? We love to hear it! Receive annual support for qualified programs.
• Lifestyle benefit. An annual benefit to spend on yourself. Use it on travel, wellness, or whatever suits you.
• Travel perks. We believe that travel is employee development, so we provide discounts and more.
• Employee assistance program. We're here for you with resources and programs to help you through life's challenges.
• Health benefits. We offer great coverage and competitive premiums.
• Generous referral scheme. Help us grow and be rewarded with generous awards for referring successful candidates.

Our Cultural Pillars:

Traveler first

We exist to create value for our customer, the traveler. We enable our suppliers and partners to unlock this value. Their collective behaviors and insights are what drives us.

Execution is our edge

We act fast, experiment, learn from failure, iterate, and improve the solutions of tomorrow across every aspect of our business. Our execution is agile, data-driven, prioritised, and built to scale. We assume no problem is someone else's problem and finish what can be done today, knowing tomorrow will bring fresh challenges.

We succeed together

The best outcomes are driven by empathic, humble, and diverse subject matter experts working toward shared goals. We collaborate relentlessly, challenge assumptions, give actionable feedback, and set each other up for success through empowered teams with a clear charter. We transparently take ownership of our growth, individually and as a team. We celebrate the quality of our effort, our learnings, and our collective achievements.

The salary range for this role is $135,000 -$155,000. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range. An employee's pay position within the wage range will be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, and business or organizational needs. This compensation range may also be modified in the future.

We strive to create an accessible and inclusive experience for all candidates. If you need a reasonable accommodation during the application or the recruiting process, please make sure to reach out to your individual recruiter or our team at [e-mail].

If you have any additional questions about careers at Tripadvisor you can email us at [e-mail]. We have all the answers!