Qualifications
Key Responsibilities:Incident Response Focused on Products:Monitor, analyze, and investigate security alerts from our AWS infrastructure, application logs, and security tools (WAF, SIEM, cloud-native tools). Respond to security incidents impacting the Tripadvisor Experiences application, such as potential data breaches, application-layer attacks, or infrastructure compromises. Triage vulnerabilities reported via our bug bounty program and other external sources. Security Engineering & Automation:Build and maintain security monitoring and alerting capabilities within our production environment. Automate security operations tasks using scripting languages like Python or Go to enhance detection and response times. Configure, tune, and manage security tools such as our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub. Vulnerability Management & Collaboration:Implement findings from application security tools (SAST, DAST, SCA) by collaborating with engineering teams to prioritize and remediate vulnerabilities in our codebase and dependencies. Conduct threat modeling for new features to identify and mitigate security risks.
About the job
About Tripadvisor
The Tripadvisor Group connects individuals to unforgettable experiences, aiming to be the most trusted source for travel and adventures globally. Leveraging our extensive brands and technology, we engage our worldwide audience with partners through rich content, insightful travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and various travel categories. Tripadvisor, Inc. (Nasdaq: TRIP) encompasses a diverse portfolio of travel brands, including Tripadvisor, Viator, and TheFork.
We are seeking a proactive Cloud Security Engineer II (AWS) to serve as the primary defense for the Tripadvisor Experiences platform. This vital mid-level role integrates proactive security engineering with reactive incident response. You will immerse yourself in our cloud environment, continuously monitoring for threats, addressing security incidents, automating defenses, and collaborating with our engineering teams to enhance platform resilience.
Job Location: This is a remote or hybrid position based in Portugal. Occasional travel to company offices may be required.
About Tripadvisor Inc.
Tripadvisor Inc. is a leading online platform connecting travelers with experiences worth sharing, offering a comprehensive suite of tools and resources to enhance travel planning and experiences. With a commitment to trust and quality, Tripadvisor serves millions of users worldwide through its innovative technology and diverse portfolio of brands.