Cloud Security Engineer II: AWS DevSecOps & Automation

Tripadvisor; Needham (MA); Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Remote-friendly culture

Tuition assistance

Travel perks

Health benefits

Bonus & annual incentives

Donation matching

Flexible schedule

Wellness program

Employee assistance program

Job summary

Tripadvisor is seeking a Cloud Security Engineer II to design, implement, and scale security guardrails across a multi-account AWS environment. You will embed security into CI/CD pipelines, automate defenses, and partner with DevOps to ensure secure-by-default infrastructure.

The role emphasizes hands-on security engineering with Terraform, Kubernetes/EKS, and scripting. Remote-friendly with on-site options, offering competitive compensation and benefits.

Qualifications

• 3–5 years of hands-on cloud security or infrastructure security engineering.
• Deep working knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations).
• Terraform and at least one scripting language (Python, Go, or Bash).
• Security of Kubernetes/EKS and CI/CD pipelines (GitHub Actions, GitLab CI).
• Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
• Familiarity with CIS Benchmarks, NIST CSF, SOC 2.

Responsibilities

• Design, deploy, and enforce scalable cloud security controls and IAM least-privilege policies in multi-account AWS.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go.
• Secure containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Manage CSPM/CNAPP platforms and tune alerts to reduce noise.
• Conduct architectural security reviews and threat modeling for new features.
• Act as a secondary contact for cloud security incidents and post-mortems.

Skills

Cloud security

DevSecOps

IAM

CI/CD security

Kubernetes security

Networking security

Security frameworks

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

Kubernetes (EKS)

AWS Security services

Job description

Tripadvisor is seeking a Cloud Security Engineer II to design, implement, and scale security guardrails across a multi-account AWS environment. You will embed security into CI/CD pipelines, automate defenses, and partner with DevOps to ensure secure-by-default infrastructure.

The role emphasizes hands-on security engineering with Terraform, Kubernetes/EKS, and scripting. Remote-friendly with on-site options, offering competitive compensation and benefits.