Cloud Security Engineer II

The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and other travel categories. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and The Fork

We are seeking a Cloud Security Engineer II to build, automate, and scale security guardrails across our cloud environment (primary focus on AWS, with secondary exposure to Azure and GCP). In this mid-level role, you will move beyond basic alert monitoring to actively design security controls, embed security into CI/CD pipelines, and partner with Dev Ops and engineering teams to ensure secure-by-default infrastructure.

• Cloud Infrastructure Guardrails:
  Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments.
• Dev Sec Ops  Integration:
  Embed automated security tools (IaC scanning, SAST, secret detection) directly into CI/CD pipelines to catch vulnerabilities pre-deployment.
• Security Automation:
  Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools (Terraform, Cloud Formation).
• Container & Workload Security:
  Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
• Posture Management & Triage:
  Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring and alert tuning.
• Threat Modeling & Reviews:
  Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations.
• Incident Escalation:
  Act as a secondary point of contact for cloud security incidents, assisting with forensic collection, root-cause analysis, and post-mortem actions.

• Experience:
  
  3-5 years of dedicated hands-on experience in cloud security, Dev Sec Ops , or infrastructure security engineering.
• Cloud Expertise:
  Deep working knowledge of core AWS security services (IAM, Guard Duty, Security Hub, KMS, Cloud Trail, Organizations).
• IaC & Code:
  Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash).
• Container & Pipeline Security:
  Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners (e.g., Git Hub Actions, Git Lab CI).
• Networking & Identity:
  Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
• Compliance & Frameworks:
  Familiarity with mapping cloud controls to industry frameworks (CIS Benchmarks, NIST CSF, SOC
  2).
• Certifications (Preferred): AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CCSP, or equivalent.
• Experience in travel, experiences, or marketplace businesses.

• Competitive compensation packages (routinely benchmarked against the latest industry data), including base salary and annual bonuses
• "Work your way" with flexibility to suit your lifestyle. Tripadvisor Group takes a remote-friendly approach to collaboration across a worldwide team, with the option to join on-site as often as you’d like or as required by your team.
• Flexible schedule. Work-life balance is ingrained in our culture by design. Trust and accountability make it work.
• Donation matching. Give back? Give more! We match qualifying…