DevSecOps Engineer (Cloud Security, AWS)
TripAdvisorResponsibilities
- Monitor, analyze, and investigate security alerts from AWS infrastructure, application logs, WAF, SIEM, and cloud-native tools.
- Respond to security incidents affecting the Tripadvisor Experiences application, including potential data breaches, application-layer attacks, and infrastructure compromises.
- Triage vulnerabilities reported through the bug bounty program and other external sources.
- Build and maintain production security monitoring and alerting capabilities.
- Automate security operations and analysis tasks with Python, Go, or Bash.
- Configure, tune, and help manage WAF, AWS GuardDuty, and Security Hub.
- Operationalize SAST, DAST, and SCA findings by helping engineering teams prioritize and remediate code and dependency vulnerabilities.
- Conduct threat modeling for new features and advise engineering teams on secure coding practices and architecture.
Requirements
- Hands-on experience securing production environments in AWS and using services such as GuardDuty, Security Hub, WAF, and CloudTrail.
- Understanding of AWS infrastructure services including VPC, EC2, RDS, S3, Lambda, and EKS.
- Proficiency with Terraform for defining, reviewing, and securing cloud infrastructure.
- Proven experience managing the full security-incident lifecycle from detection through post-mortem.
- Proficiency in at least one scripting language, such as Python, Go, or Bash.
- Understanding of common web application vulnerabilities, including the OWASP Top 10, and their defenses.
- Ability to use AI tools to improve day-to-day efficiency, quality, and decision-making.
- Ability to operate effectively with a global-first mindset.
Benefits
- Permanent employment contract (umowa o pracę) in Poland.
- Remote-first work arrangement with optional onsite collaboration as needed.
- Flexible schedule and work-life balance support.
- Annual charitable donation matching.
- Tuition assistance for qualified programs.
- Annual lifestyle benefit for travel, wellness, or other uses.
- Travel discounts and other travel perks.
- Employee assistance program.
- Health benefits with competitive premiums.
About TripAdvisor
Tripadvisor, the world's largest travel guidance platform*, helps hundreds of millions of people each month** become better travelers, from planning to booking to taking a trip. Travelers across the globe use the Tripadvisor site and app to discover where to stay, what to do and where to eat based on guidance from those who have been there before. With more than 1 billion reviews and opinions of nearly 8 million businesses, travelers turn to Tripadvisor to find deals on accommodations, book experiences, reserve tables at delicious restaurants and discover great places nearby. As a travel guidance company available in 43 markets and 22 languages, Tripadvisor makes planning easy no matter the trip type. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), own and operate a portfolio of travel media brands and businesses, operating under various websites and apps, including the following: www.bokun.io, www.cruisecritic.com, www.flipkey.com, www.thefork.com, www.helloreco.com, www.holidaylettings.co.uk, www.jetsetter.com, www.niumba.com, www.seatguru.com, www.singleplatform.com, www.vacationhomerentals.com, www.viator.com. * Source: SimilarWeb, unique users de-duplicated monthly, September 2023 ** Source: Tripadvisor internal log files