About TripadvisorThe Tripadvisor Group connects individuals with experiences that deserve to be shared. Our mission is to be the world’s most reliable source for travel and experiences. Through our diverse brands, advanced technology, and capabilities, we engage a global audience with partners using rich content, travel insights, and two-sided marketplaces for experiences, accommodations, dining, and more. Tripadvisor, Inc. (Nasdaq: TRIP) encompasses a portfolio of esteemed travel brands, including Tripadvisor, Viator, and TheFork.We are on the lookout for a proactive Senior Cloud Security Engineer who will serve as the first line of defense for the Tripadvisor Experiences platform. This pivotal role merges proactive security engineering with responsive incident management. You will immerse yourself in our cloud environment, vigilantly monitoring for threats, addressing security incidents, automating defenses, and collaborating closely with our engineering teams to fortify our platform.This position is available for remote work in either Portugal or Poland.What You'll DoIncident Response Focused on Products:Monitor, analyze, and investigate security alerts from our AWS infrastructure, application logs, and security tools (WAF, SIEM, Cloud-Native tools).Lead incident responses that affect the Viator application, including potential data breaches, application-layer assaults, or infrastructure vulnerabilities.Oversee and prioritize vulnerabilities reported through our bug bounty program and other sources.Security Engineering & Automation:Develop and sustain security monitoring and alerting systems within our production environment.Automate security operations tasks using scripting languages like Python or Go to enhance our detection and response capabilities.Configure, fine-tune, and manage security tools, including our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub.Vulnerability Management & Team Collaboration:Translate findings from application security tools (SAST, DAST, SCA) into actionable steps by collaborating with engineering teams to prioritize and remediate vulnerabilities in our codebase and dependencies.Conduct threat modeling for new features to identify and mitigate risks before deployment.Act as a security subject matter expert and mentor for other team members.
Feb 6, 2026