Senior Application Security Engineer
TripAdvisorResponsibilities
- Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management.
- Conduct threat modeling, risk assessments, manual security assessments, and code reviews.
- Act as a security breach subject matter expert by performing root cause analysis and creating corrective actions for vulnerabilities.
- Develop and enforce application security policies across multiple engineering teams.
- Mentor and train junior engineers and influence security practices across teams.
- Advise on security architecture and design for new features and systems.
- Integrate security requirements into software development lifecycles with engineering and product teams.
- Advocate for prioritization of security issues and remediation of technical debt.
- Monitor emerging security threats and industry best practices.
Requirements
- Extensive application security experience covering secure coding, threat modeling, vulnerability assessments, and incident response.
- Hands-on experience with SAST and DAST security testing tools and their integration into development pipelines.
- Strong knowledge of encryption, secure software design, identity management, and API security.
- Experience with cloud security, including AWS or Azure, and securing microservices architectures.
- At least 4 years of experience as a Security Engineer or Application Security Analyst.
- Leadership, mentoring, communication, and cross-functional collaboration skills.
- Preferred: experience with GDPR, PCI-DSS, and SOC 2 regulatory frameworks.
- Preferred: OSCP, OSCE, or similar industry-recognized security certification.
- Preferred: familiarity with current security tools and frameworks and a commitment to mentoring and continuous learning.
Benefits
- Permanent employment contract (UoP) based remotely in Poland.
- Remote-friendly work arrangement with the option to work on-site as often as desired or required by the team.
- Flexible schedule and work-life balance support.
- Competitive compensation packages with base salary and annual bonuses.
- Annual charitable donation matching.
- Tuition assistance for qualified programs.
- Annual lifestyle benefit for travel, wellness, or other personal uses.
- Travel discounts and other travel perks.
- Employee assistance program.
- Health benefits with competitive premiums.
- Employee referral scheme with awards for successful referrals.
About TripAdvisor
Tripadvisor, the world's largest travel guidance platform*, helps hundreds of millions of people each month** become better travelers, from planning to booking to taking a trip. Travelers across the globe use the Tripadvisor site and app to discover where to stay, what to do and where to eat based on guidance from those who have been there before. With more than 1 billion reviews and opinions of nearly 8 million businesses, travelers turn to Tripadvisor to find deals on accommodations, book experiences, reserve tables at delicious restaurants and discover great places nearby. As a travel guidance company available in 43 markets and 22 languages, Tripadvisor makes planning easy no matter the trip type. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), own and operate a portfolio of travel media brands and businesses, operating under various websites and apps, including the following: www.bokun.io, www.cruisecritic.com, www.flipkey.com, www.thefork.com, www.helloreco.com, www.holidaylettings.co.uk, www.jetsetter.com, www.niumba.com, www.seatguru.com, www.singleplatform.com, www.vacationhomerentals.com, www.viator.com. * Source: SimilarWeb, unique users de-duplicated monthly, September 2023 ** Source: Tripadvisor internal log files