Cloud Security Engineer II — Remote & DevSecOps Focus

TripAdvisor LLC; Needham, Northern (MA, KY); Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Remote-friendly

Tuition assistance

Health benefits

Travel perks

Donation matching

Flexible schedule

Employee assistance program

Job summary

Tripadvisor LLC is seeking a Cloud Security Engineer II to design, automate, and scale security guardrails across our AWS environments, with exposure to Azure and GCP. You will embed security into CI/CD and partner with DevOps to enable secure-by-default infrastructure, supporting the Needham MA or remote US teams.

The role emphasizes hands-on security controls, CSPM/CNAPP posture, incident response, and collaboration with engineering to reduce risk across travel platforms.

Qualifications

• ,

Responsibilities

• Design, deploy, and enforce scalable cloud security controls across multi-account AWS environments.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools.
• Secure containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Manage CSPM/CNAPP platforms and tune alerts to reduce noise via automated risk scoring.
• Conduct architectural security reviews and threat modeling for new cloud features and integrations.
• Act as a secondary contact for cloud security incidents, aiding in forensics and post-mortems.

Skills

Cloud security

DevSecOps

IaC (Terraform)

Python

Go

Bash

Kubernetes

CI/CD security scanners

AWS security services

Networking & identity

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

Job description

Tripadvisor LLC is seeking a Cloud Security Engineer II to design, automate, and scale security guardrails across our AWS environments, with exposure to Azure and GCP. You will embed security into CI/CD and partner with DevOps to enable secure-by-default infrastructure, supporting the Needham MA or remote US teams.

The role emphasizes hands-on security controls, CSPM/CNAPP posture, incident response, and collaboration with engineering to reduce risk across travel platforms.