Category: Security specialist
Dear Candidate,
Before submitting your resume, please pay attention to the location – we will not be able to review your resume and provide feedback if you are not (in fact) located in the location of the vacancy.
Thanks for understanding
About the project – №1 Travel platform in the world!
We believe that we are better together, and at company we welcome you for who you are. Our workplace is for everyone, as is our people powered platform.
At company, we want you to bring your unique identities, abilities, and experiences, so we can collectively revolutionize travel and together find the good out there.
We are looking for a Product and Member Security Engineer to join our dynamic security team at Tripadvisor. The Product and Member Security Engineer will play a pivotal role in collaborating with product management and engineering teams to enhance the security of our websites, mobile applications, and B2B customer and consumer interfaces. You will be responsible for safeguarding our systems and ensuring the protection of our users’ data.
What you will do:
- Work closely with product management and engineering teams to integrate security measures into the development life cycle of websites, mobile applications, and B2B interfaces.
- Perform security assessments and code reviews to identify vulnerabilities and recommend mitigation strategies.
- Develop and implement security guidelines, best practices, and standards for product development.
- Collaborate with cross-functional teams to ensure secure software development practices and security awareness.
- Investigate and respond to security incidents and breaches, implementing necessary corrective actions.
- Monitor security trends, emerging threats, and industry best practices to keep our systems resilient and up-to-date.
- Assist in creating and maintaining a culture of security within the organization.
- Conduct security training and awareness programs for development and product teams.
Who You Are:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- A minimum of 3 years of experience in a security engineering role, particularly in web and mobile application security.
- Strong understanding of application security concepts, best practices, and common vulnerabilities.
- Familiarity with security standards, including OWASP, CWE, and secure coding practices.
- Experience with security assessment tools and methodologies.
- Strong problem-solving and communication skills to collaborate with cross-functional teams effectively.
- Security certifications such as CISSP, CSSLP, CEH, or relevant credentials are a plus.
- Familiarity with mobile application security (iOS and Android) and B2B security considerations is advantageous.
- PLUS, if you have some development experience and/or working knowledge of code.
Nice to have:
- Exposure to machine learning platforms and practices
- Experience with Spring Boot or FastAPI
- Experience with cloud platforms (e.g. AWS, Azure, GCP)
- Experience with infrastructure as code tools like CDK or Terraform
- Experience with containerization technologies (e.g. Docker)
- Experience with container services like Kubernetes or ECS
- Experience with distributed computing such as Snowflake or Apache Spark
Why join us:
- Ability to work remotely from anywhere in the world
- Close cooperation with the development team and client
- Opportunity to influence product development
- Professional growth: the certification preparation course is free for our specialists. The company pays for two attempts to pass the exam, regardless of the exam result
- We cover English classes (with a native speaker)
- Boost professional brand: you can participate in local conferences as a listener or as a speaker
- Regular team buildings: have fun with teammates
- Gifts for significant life events (marriage, childbirth)
- Tech and non-tech Zazmic Communities: support and share experience with each other
