Senior Cloud Security Engineer Job at Tripadvisor

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...

Location

United States , Scottsdale

Salary:

Not provided

Axon

Expiration Date

Until further notice

Requirements

7+ years of experience in operations, site reliability, or infrastructure engineering roles
Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
Experience with security monitoring, alerting, SIEM platforms, and observability tools
Solid grasp of CI/CD practices with integrated security testing and compliance checks
Experience managing Kubernetes clusters and running containerized workloads in production
Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
PKI solutions such as EJBCA, Smallstep, Venafi
or vaulting solutions such as Hashicorp Vault

Job Responsibility

Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
Collaborating with developers to develop new features, services, and infrastructure requirements
Enhancing security observability through improved log collection, metrics, and alerting configurations
Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
Troubleshoot and resolve complex operational and system-level issues across environments

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Snacks in our offices

Fulltime

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...

Location

United States , Scottsdale

Salary:

Not provided

Axon

Expiration Date

Until further notice

Requirements

7+ years of experience in operations, site reliability, or infrastructure engineering roles
Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
Experience with security monitoring, alerting, SIEM platforms, and observability tools
Solid grasp of CI/CD practices with integrated security testing and compliance checks
Experience managing Kubernetes clusters and running containerized workloads in production
Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
PKI solutions such as EJBCA, Smallstep, Venafi
or vaulting solutions such as Hashicorp Vault

Job Responsibility

Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
Collaborating with developers to develop new features, services, and infrastructure requirements
Enhancing security observability through improved log collection, metrics, and alerting configurations
Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
Troubleshoot and resolve complex operational and system-level issues across environments

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Snacks in our offices

Fulltime

Senior Security Engineer

We are seeking a Senior Vulnerability Management Engineer to lead and enhance ou...

Location

Philippines , Makati City

Salary:

Not provided

Avaloq

Expiration Date

Until further notice

Requirements

Extensive hands-on experience with Tenable (Tenable.io, Tenable.sc, Nessus Manager)
Deep technical expertise in vulnerability detection, authenticated scan engineering, and hybrid infrastructure scanning
Strong knowledge of networks, Windows/Linux, VMware, cloud platforms (AWS and OCI), and container ecosystems
Scripting and automation skills (Python, PowerShell, REST APIs)
Solid understanding of security frameworks: CIS Benchmarks, ISO 27001, SWIFT CSCF, CSA CCM
Experience in FINMA, MAS and DORA regulated financial environments (banks, insurers, securities firms)
Ability to communicate technical risk clearly to both engineers and senior management
Certifications: OCI Security Professional, Tenable Certified Engineer, CISSP

Job Responsibility

Lead engineering, architecture, and advanced configuration of Tenable.io / Tenable.sc / Nessus across hybrid infrastructures
Oversee authenticated scanning across servers, cloud workloads, network appliances, databases, and container platforms
Integrate Tenable with enterprise systems (CMDB, SIEM, ITSM) using APIs and scripting (Python/PowerShell)
Engineer cloud vulnerability coverage via connectors, agents, and container registry scans
Enhance detection accuracy through custom plugins, scan policy tuning, and automation pipelines
Provide technical leadership and guidance to remediation teams, ensuring adherence to CIS/NIST/SWIFT/ISO standards
Produce regulator-ready metrics, dashboards, and audit evidence for FINMA and MAS reviews
Contribute to security architecture, hardening initiatives, and continuous improvement of the vulnerability management program

What we offer

Annual bonus
Flexible working
Instant recognition
Access to Udemy for professional and personal learning

Fulltime

Senior Application Security Engineer

As an Application Security - Senior Product Security Engineer, you will play a c...

Location

United States

Salary:

157000.00 - 216000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment
Strong understanding of web app and API security, microservices, and containerized architectures
Experience integrating security tooling into modern CI/CD workflows
Proficiency with SAST, DAST, IaC scanning, and container security platforms
Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript)
Familiarity with AWS security, Kubernetes security, and DevSecOps best practices

Job Responsibility

Lead application security initiatives across all SaaS products and microservices
Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems
Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools
Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads
Drive AppSec awareness and training, developing secure coding practices and guidelines
Evaluate and deploy container security controls, ensuring images and orchestrators (Kubernetes, ECS, etc.) follow best practices
Support bug bounty and vulnerability disclosure programs and coordinate penetration testing
Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks

What we offer

Competitive compensation, benefits, and career growth opportunities
Opportunity to shape and drive product security strategy
Collaborative and security-minded engineering culture
Work on cutting-edge security challenges in a fast-growing company
Performance-based bonus
Equity
Generous benefits program

Fulltime

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime