Senior Application Security Engineer
TripAdvisorResponsibilities
- Lead the design and implementation of application security measures including encryption, secure APIs, and identity management.
- Conduct threat modeling and risk assessments to identify and mitigate security risks.
- Perform manual security assessments, including code reviews.
- Serve as a subject matter expert for security breaches, root cause analysis, and corrective actions for vulnerabilities.
- Develop and enforce application security policies across multiple engineering teams.
- Mentor and train junior engineers in security knowledge and practices.
- Advise on security architecture and design for new features and systems.
- Collaborate with engineering and product teams to integrate security requirements into software development lifecycles.
- Advocate for prioritization of security issues and resolution of technical debt.
- Monitor emerging security threats and industry best practices.
Requirements
- Extensive application security experience covering secure coding, threat modeling, vulnerability assessments, and incident response.
- Hands-on experience with SAST and DAST security testing tools and their integration into development pipelines.
- Strong understanding of encryption, secure software design, identity management, and API security.
- Experience with cloud security using AWS, Azure, or similar platforms and with securing microservices architectures.
- Proven ability to guide and mentor engineers and influence security practices across teams.
- Strong communication and collaboration skills with cross-functional engineering and product teams.
- At least 4 years of experience working as a Security Engineer or Application Security Analyst.
- Experience with GDPR, PCI-DSS, SOC 2, or similar regulatory frameworks is preferred.
- OSCP, OSCE, or similar industry-recognized security certification is preferred.
- Familiarity with current security tools and frameworks for identifying and mitigating vulnerabilities is preferred.
- Passion for mentoring, developing others, and continuous learning is preferred.
Benefits
- Permanent contract based in London, UK.
- Remote-friendly collaboration with the option to work on-site as often as desired or required by the team.
- Flexible schedule and work-life balance support.
- Annual matching for qualifying charitable donations.
- Tuition assistance for qualified programs.
- Annual lifestyle benefit for travel, wellness, or other personal expenses.
- Travel discounts and other travel perks.
- Employee assistance program.
- Health benefits with competitive premiums.
- Referral rewards for successful candidate referrals.
About TripAdvisor
Tripadvisor, the world's largest travel guidance platform*, helps hundreds of millions of people each month** become better travelers, from planning to booking to taking a trip. Travelers across the globe use the Tripadvisor site and app to discover where to stay, what to do and where to eat based on guidance from those who have been there before. With more than 1 billion reviews and opinions of nearly 8 million businesses, travelers turn to Tripadvisor to find deals on accommodations, book experiences, reserve tables at delicious restaurants and discover great places nearby. As a travel guidance company available in 43 markets and 22 languages, Tripadvisor makes planning easy no matter the trip type. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), own and operate a portfolio of travel media brands and businesses, operating under various websites and apps, including the following: www.bokun.io, www.cruisecritic.com, www.flipkey.com, www.thefork.com, www.helloreco.com, www.holidaylettings.co.uk, www.jetsetter.com, www.niumba.com, www.seatguru.com, www.singleplatform.com, www.vacationhomerentals.com, www.viator.com. * Source: SimilarWeb, unique users de-duplicated monthly, September 2023 ** Source: Tripadvisor internal log files