Remote Cloud Security Engineer II: Secure AWS & CI/CD

Socket.dev; Needham (MA); Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Competitive compensation

Remote-friendly

Flexible schedule

Tuition assistance

Travel perks

Health benefits

Referral program

Job summary

Tripadvisor Group is seeking a Cloud Security Engineer II to design and scale security guardrails across our AWS-based cloud environment, with remote-friendly options in the United States. You will partner with DevOps and engineering teams to embed security into CI/CD and ensure secure-by-default infrastructure.

In this role you will implement IaC checks, threat modeling, and incident response support, helping to reduce risk and improve our security posture across multi-account environments.

Qualifications

• 3-5 years hands-on experience in cloud security, DevSecOps, or infrastructure security.
• Deep knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations).
• Strong proficiency in Infrastructure as Code (Terraform) and at least one scripting language (Python, Go, or Bash).
• Container security for Kubernetes/EKS and configuring CI/CD security scanners (GitHub Actions, GitLab CI).
• Knowledge of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
• Familiarity with CIS Benchmarks, NIST CSF, SOC 2.
• Certifications (Preferred): AWS Certified Security - Specialty, CKS, CCSP, or equivalent.
• Experience in travel, experiences, or marketplace businesses.

Responsibilities

• Design, deploy, and enforce scalable cloud security controls across multi-account AWS environments.
• Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools.
• Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Manage CSPM/CNAPP platforms, investigate high-priority alerts, and tune risk scoring.
• Conduct architectural security reviews and threat modeling for new cloud features and integrations.
• Act as a secondary point of contact for cloud security incidents and post-mortem actions.

Skills

Cloud security

AWS security services

Terraform

Scripting (Python/Bash/Go)

Kubernetes security

CI/CD security scanners

Networking & IAM

Tools

Terraform

Job description

Tripadvisor Group is seeking a Cloud Security Engineer II to design and scale security guardrails across our AWS-based cloud environment, with remote-friendly options in the United States. You will partner with DevOps and engineering teams to embed security into CI/CD and ensure secure-by-default infrastructure.

In this role you will implement IaC checks, threat modeling, and incident response support, helping to reduce risk and improve our security posture across multi-account environments.