Senior Security Engineer

WeTravel
Bulgaria, Portugal, Italy, Poland, Spain, Dublin, Lithuania
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Risk-based prioritization","Automation mindset","Cross-functional collaboration","Incident response coordination","Evidence-based security discussions"]

Own and mature infrastructure vulnerability management across dependencies, containers, images, and cloud systems using a single risk register and scoring model. Automate security workflows (scanning, normalization, ticket routing) and strengthen detection via logging coverage and managed detection provider telemetry. Lead cloud/infrastructure security posture management, coordinate incident response and evidence for SOC 2 and PCI DSS, and collaborate with platform, product, and IT to drive remediation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WeTravel
WeTravel
1 day ago

Senior Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Own and mature infrastructure vulnerability management across dependencies, containers, images, and cloud systems using a single risk register and scoring model. Automate security workflows (scanning, normalization, ticket routing) and strengthen detection via logging coverage and managed detection provider telemetry. Lead cloud/infrastructure security posture management, coordinate incident response and evidence for SOC 2 and PCI DSS, and collaborate with platform, product, and IT to drive remediation.
Location: Bulgaria, Portugal, Italy, Poland, Spain, Dublin, Lithuania
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own infrastructure vulnerability management using a central register across dependencies, containers, images, and cloud infrastructure with risk-based SLAs and reporting.
  • •Prioritize infrastructure remediation using risk signals such as KEV, EPSS, exposure, asset criticality, and compensating controls.
  • •Automate infrastructure-security workflows including scanner integrations, finding pipelines, normalization, ticket routing, and reporting.
  • •Build detection foundations by improving security logging coverage and retention across production, cloud, and identity systems; select and run a managed detection provider.
  • •Lead infrastructure and cloud security posture management and coordinate incident response, including runbooks, tabletop exercises, and corrective actions, in partnership with Product Security when needed.

Pay and Benefits

Perks:Paid LeaveRemote WorkCommuter BenefitsVolunteer Days

Key Requirements

  • •8+ years in security engineering with deep experience in security operations such as vulnerability management, cloud security posture, detection, or incident response.
  • •Experience with AWS and Kubernetes, including the ability to reason about infrastructure as code.
  • •Expertise with security logging and SIEM-class tooling, including working with managed detection providers.
  • •Hands-on infrastructure vulnerability management at scale: scanning fleets, images, containers, and dependencies; prioritizing by exploitability using KEV/EPSS/exposure/asset criticality; driving remediation through owning teams.
  • •Experience with SOC 2 and/or PCI DSS technical controls.
Experience:Security engineeringSecurity operationsCloud securityVulnerability managementIncident responseSIEMSOC 2PCI DSSKubernetes
Skills:Risk-based prioritizationAutomation mindsetCross-functional collaborationIncident response coordinationEvidence-based security discussions
Tech Stack:ReactReactNativeTypeScriptRuby on RailsGoPythonMicroservicesKubernetesMongoDBMySQLPostgresSnowflakeAWSSIEMCSPMSOC 2PCI DSSGDPRISO27001Cyber Resilience Act

Company Brief

WeTravel
WeTravel provides an online booking, payment, and management platform for tour operators, travel agencies, and group travel organizers, enabling itinerary management, secure payments, and customer invoicing to streamline group travel operations.
Industry: TravelTech
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: San Francisco, United States
Founded: 2014
WebsiteLinkedIn