Cloud Security Engineer II

Overview As a Cloud Security Engineer II at Tripadvisor Group, you design and scale cloud security guardrails across multi-account AWS environments and beyond. You’ll embed security into CI/CD pipelines, collaborate with DevOps and engineering to enforce secure-by-default infrastructure, and lead threat modeling for new features. This role offers impact across a global, travel-focused platform with strong emphasis on automation, posture management, and incident response. You’ll shape security practices that enable fast, secure delivery at scale. Compensation / Benefitsremote-friendlyflexible schedulehealth benefitsdonation matchingtuition assistancetravel perks ResponsibilitiesDesign, deploy, and enforce scalable cloud security controls and IAM least-privilege policies across multi-account AWS environmentsIntegrate automated security tools (IaC scanning, SAST, secret detection) into CI/CD pipelinesDevelop automated detection and remediation workflows using Python, Bash, or Go with Terraform or CloudFormationImplement security for containerized workloads (Docker, Kubernetes/EKS) and serverless architecturesManage CSPM/CNAPP platforms, tune alerts, and automate risk scoring to reduce noiseConduct architectural security reviews and threat modelling for new cloud features and integrationsServe as secondary incident escalation point, performing forensic collection and post-mortem actions Key requirements3–5 years of hands-on cloud security, DevSecOps, or infrastructure security experienceDeep knowledge of AWS security services: IAM, GuardDuty, Security Hub, KMS, CloudTrail, OrganizationsProficiency in Terraform (preferred) and at least one scripting language (Python, Go, or Bash)Experience securing Kubernetes/EKS and configuring CI/CD security scanners (GitHub Actions, GitLab CI)Solid understanding of cloud networking and identity management (VPCs, Transit Gateways, WAF, DNS; OAuth2, OIDC, SAML)Familiarity with mapping controls to CIS, NIST CSF, SOC 2; certifications preferredcollaborationanalytical thinkingstrong communicationAWS IAMGuardDutySecurity Hub