About the company
The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences.
Responsibilities
- Product-Focused Incident Response: Monitor, analyze, and investigate security alerts originating from our AWS infrastructure, application logs, and security tooling (WAF, SIEM, Cloud-Native tools). Respond to security incidents that directly impact the Tripadvisor Experiences application. Triage vulnerabilities reported through our bug bounty program.
- Security Engineering & Automation: Build and maintain security monitoring and alerting capabilities within our production environment. Automate security operations tasks using scripting languages like Python or Go. Configure, tune, and help manage security tools like our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub.
- Vulnerability Management & Collaboration: Operationalize findings from application security tools (SAST, DAST, SCA) by working with engineering teams to prioritize and remediate vulnerabilities. Conduct threat modeling for new features. Collaborate with engineering teams and provide guidance on secure coding practices and architecture.
Requirements
- AWS Security Operations: Hands-on experience securing a production environment in AWS. Comfortable with core security services (e.g., GuardDuty, Security Hub, WAF, CloudTrail).
- AWS Cloud Infrastructure: Good understanding of core AWS services beyond just security tools (e.g., VPC networking, EC2, RDS, S3, Lambda, EKS).
- Infrastructure as Code: Proficiency with Terraform for managing and securing cloud infrastructure.
- Incident Response: Proven experience with the full lifecycle of security incidents.
- Scripting for Automation: Proficiency in at least one scripting language (e.g., Python, Go, Bash).
- Application Security Fundamentals: Solid understanding of common web application vulnerabilities (OWASP Top 10).
- Demonstrated ability to use AI tools to improve efficiency, quality, and decision-making.
- Proven ability to operate effectively with a global-first mindset.
Conditions
- Competitive compensation packages including base salary and annual bonuses.
- Remote-friendly approach with flexible schedule.
- Donation matching, tuition assistance, lifestyle benefit, travel perks, employee assistance program, health benefits.