Cloud Security Engineer II

Tripadvisor•Needham, MA

11d•$135,000 - $155,000•Hybrid

About The Position

The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and other travel categories. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork We are seeking a Cloud Security Engineer II to build, automate, and scale security guardrails across our cloud environment (primary focus on AWS, with secondary exposure to Azure and GCP). In this mid-level role, you will move beyond basic alert monitoring to actively design security controls, embed security into CI/CD pipelines, and partner with DevOps and engineering teams to ensure secure-by-default infrastructure.

Requirements

3–5 years of dedicated hands-on experience in cloud security, DevSecOps, or infrastructure security engineering.
Deep working knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations).
Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash).
Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners (e.g., GitHub Actions, GitLab CI).
Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML).
Familiarity with mapping cloud controls to industry frameworks (CIS Benchmarks, NIST CSF, SOC 2).

Nice To Haves

AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CCSP, or equivalent.
Experience in travel, experiences, or marketplace businesses.

Responsibilities

Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments.
Embed automated security tools (IaC scanning, SAST, secret detection) directly into CI/CD pipelines to catch vulnerabilities pre-deployment.
Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools (Terraform, CloudFormation).
Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures.
Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring and alert tuning.
Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations.
Act as a secondary point of contact for cloud security incidents, assisting with forensic collection, root-cause analysis, and post-mortem actions.

Benefits

Competitive compensation packages (routinely benchmarked against the latest industry data), including base salary and annual bonuses
“Work your way” with flexibility to suit your lifestyle. Tripadvisor Group takes a remote-friendly approach to collaboration across a worldwide team, with the option to join on-site as often as you’d like or as required by your team.
Flexible schedule. Work-life balance is ingrained in our culture by design. Trust and accountability make it work.
Donation matching. Give back? Give more! We match qualifying charitable donations annually.
Tuition assistance. Want to level up your career? We love to hear it! Receive annual support for qualified programs.
Lifestyle benefit. An annual benefit to spend on yourself. Use it on travel, wellness, or whatever suits you.
Travel perks. We believe that travel is employee development, so we provide discounts and more.
Employee assistance program. We’re here for you with resources and programs to help you through life’s challenges.
Health benefits. We offer great coverage and competitive premiums.
Generous referral scheme. Help us grow and be rewarded with generous awards for referring successful candidates.