Cloud Security Engineer II (AWS, SecOps)

About Tripadvisor The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and other travel categories. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork. We are looking for a hands-on Cloud Security Engineer II (AWS, SecOps) to be the first line of defense for the Tripadvisor Experiences platform. This is a critical mid-level role that blends proactive security engineering with reactive incident response. You will live and breathe in our product's cloud environment, monitoring for threats, responding to security incidents, automating defenses, and working closely with our engineering teams to build a more resilient platform. Job Location: Poland, remote. We are able to offer only permanent contracts (umowa o pracę) What You’ll Do: Product-Focused Incident Response: Monitor, analyze, and investigate security alerts originating from our AWS infrastructure, application logs, and security tooling (WAF, SIEM, Cloud-Native tools). Respond to security incidents that directly impact the Tripadvisor Experiences application, such as potential data breaches, application-layer attacks, or infrastructure compromises. Triage vulnerabilities reported through our bug bounty program and other external sources. Security Engineering & Automation: Build and maintain security monitoring and alerting capabilities within our production environment. Automate security operations tasks using scripting languages like Python or Go to improve our detection and response times. Configure, tune, and help manage security tools like our Web Application Firewall (WAF), AWS GuardDuty, and Security Hub. Vulnerability Management & Collaboration: Operationalize findings from application security tools (SAST, DAST, SCA) by working with engineering teams to prioritize and remediate vulnerabilities in our codebase and dependencies. Conduct threat modeling for new features to identify and mitigate risks before they reach production. Collaborate with engineering teams and provide guidance on secure coding practices and architecture. Skills & Experience: AWS Security Operations: Hands-on experience securing a production environment in AWS. You must be comfortable with its core security services (e.g.