[Remote] Cloud Security Engineer II

Note: The job is a remote job and is open to candidates in USA. Tripadvisor connects people to travel and experiences through content, guidance, and two-sided marketplaces. The company is seeking a Cloud Security Engineer II to design and automate security guardrails across its cloud environment, integrate security into CI/CD pipelines, and partner with DevOps and engineering teams to secure infrastructure by default.

Responsibilities

• Cloud Infrastructure Guardrails: Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments
• DevSecOps Integration: Embed automated security tools (IaC scanning, SAST, secret detection) directly into CI/CD pipelines to catch vulnerabilities pre-deployment
• Security Automation: Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools (Terraform, CloudFormation)
• Container & Workload Security: Implement and maintain security practices for containerized workloads (Docker, Kubernetes/EKS) and serverless architectures
• Posture Management & Triage: Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring and alert tuning
• Threat Modeling & Reviews: Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations
• Incident Escalation: Act as a secondary point of contact for cloud security incidents, assisting with forensic collection, root-cause analysis, and post-mortem actions

Skills

• * Experience: 3–5 years of dedicated hands-on experience in cloud security, DevSecOps, or infrastructure security engineering
• * Cloud Expertise: Deep working knowledge of core AWS security services (IAM, GuardDuty, Security Hub, KMS, CloudTrail, Organizations)
• * IaC & Code: Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash)
• * Container & Pipeline Security: Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners (e.g., GitHub Actions, GitLab CI)
• * Networking & Identity: Solid understanding of cloud networking (VPCs, Transit Gateways, WAF, DNS) and identity management (OAuth2, OIDC, SAML)
• * Compliance & Frameworks: Familiarity with mapping cloud controls to industry frameworks (CIS Benchmarks, NIST CSF, SOC 2)
• * Experience in travel, experiences, or marketplace businesses
• * Certifications (Preferred): AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CCSP, or equivalent

Benefits

• Annual bonuses
• “Work your way” with flexibility to suit your lifestyle, including a remote-friendly approach to collaboration and the option to join on-site as often as you’d like or as required by your team.
• Flexible schedule
• Donation matching for qualifying charitable donations annually
• Tuition assistance with annual support for qualified programs
• An annual lifestyle benefit to spend on travel, wellness, or whatever suits you
• Travel discounts and more
• Employee assistance program with resources and programs to help through life’s challenges
• Health benefits with great coverage and competitive premiums
• Generous referral awards for referring successful candidates

Company Overview

Company H1B Sponsorship