Note: The job is a remote job and is open to candidates in USA. Tripadvisor connects people to travel and experiences through content, guidance, and two-sided marketplaces. The company is seeking a Cloud Security Engineer II to design and automate security guardrails across its cloud environment, integrate security into CI/CD pipelines, and partner with DevOps and engineering teams to secure infrastructure by default.
Responsibilities
- Cloud Infrastructure Guardrails: Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments
- DevSecOps Integration: Embed automated security tools (IaC scanning, SAST, secret detection) directly into CI/CD pipelines to catch vulnerabilities pre-deployment
- Security Automation: Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools (Terraform, CloudFormation)
- Container & Workload Security: Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures
- Posture Management & Triage: Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring and alert tuning
- Threat Modeling & Reviews: Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations
- Incident Escalation: Act as a secondary point of contact for cloud security incidents, assisting with forensic collection, root-cause analysis, and post-mortem actions
Skills
- * Experience: 3–5 years of dedicated hands-on experience in cloud security, DevSecOps, or infrastructure security engineering
- * Cloud Expertise: Deep working knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations)
- * IaC & Code: Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash)
- * Container & Pipeline Security: Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners (e.g., GitHub Actions, GitLab CI)
- * Networking & Identity: Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML)
- * Compliance & Frameworks: Familiarity with mapping cloud controls to industry frameworks (CIS Benchmarks, NIST CSF, SOC 2)
- * Experience in travel, experiences, or marketplace businesses
- * Certifications (Preferred): AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CCSP, or equivalent
Benefits
- Annual bonuses
- “Work your way” with flexibility to suit your lifestyle, including a remote-friendly approach to collaboration and the option to join on-site as often as you’d like or as required by your team.
- Flexible schedule
- Donation matching for qualifying charitable donations annually
- Tuition assistance with annual support for qualified programs
- An annual lifestyle benefit to spend on travel, wellness, or whatever suits you
- Travel discounts and more
- Employee assistance program with resources and programs to help through life’s challenges
- Health benefits with great coverage and competitive premiums
- Generous referral awards for referring successful candidates
Company Overview
Company H1B Sponsorship