Senior Security Engineer
WeTravel· Engineering & Product
Hybrid (Amsterdam)Full-timePosted 4w ago
About the role
Senior Security Engineer responsible for infrastructure vulnerability management, cloud security posture, detection, incident response, and collaboration with product and platform teams to secure WeTravel’s infrastructure and data with a focus on scalable, risk-based security practices.
Responsibilities
- Own infrastructure vulnerability management across infrastructure dependencies, containers, images, and cloud infrastructure with a unified register and risk-based SLAs.
- Prioritize infrastructure remediation using KEV, EPSS, exposure, asset criticality, and compensating controls within a common severity model.
- Automate infrastructure-security workflows: scanner integrations, finding pipelines, normalization, ticket routing, and reporting.
- Build and maintain detection foundations: security logging coverage, retention, telemetry, and engagement with managed detection and response partners.
- Lead infrastructure and cloud security posture management: guardrails, baselines, CSPM findings triage, internet-facing surface inventory, image and container security.
- Coordinate security incident response: runbooks, tabletop exercises, post-incident actions; partner with Product Security on product-risk incidents.
- Collaborate with product, platform engineering and IT on remediation; ensure triaged, deduplicated findings with trusted queues.
- Provide technical evidence for SOC 2, PCI DSS, and customer due diligence obligations (access reviews, scan results, patch compliance).
- Collaborate with Product & Platform teams and support customer-facing security discussions with accurate technical evidence and context.
- AI Related: maintain and operationalize Internal AI Use Policy; secure internal AI tooling and agentic workflows; ensure auditable agentic actions.
Qualifications
- 8+ years in security engineering focusing on security operations (vulnerability management, cloud security posture, detection, or incident response).
- Experience with AWS and Kubernetes, and infrastructure as code reasoning.
- Expertise with security logging and SIEM tooling and managed detection providers.
- Hands-on experience running infrastructure vulnerability management at scale (scanning fleets, images, containers, dependencies) with risk-based prioritization and remediation coordination.
- Experience with SOC 2 and/or PCI DSS technical controls.
Skills
Required:Infrastructure vulnerability managementCloud security posture management (CSPM)Security logging and SIEMIncident responseAWS & Kubernetes
Benefits
- Competitive salary
- Time to Recharge policy with unlimited paid time off
- Work From Anywhere up to four weeks per calendar year
- 2-week cross-functional onboarding program
- Annual team off-site
- Cycle-to-work scheme or commuting reimbursement
- Monday/Thursday team lunches and after-work social events
- Extensive paid family leave
- Three paid volunteer days per year
- Cutting-edge equipment and tools
- International, travel-loving team culture
- Booking Marketplace access with exclusive travel discounts
Last updated Oct 21, 2026. Interested? Apply on the company site.
About WeTravel
More open roles at WeTravel
- Accounting Manager4d agoRemote · Finance & Operations
- Customer Support Manager Americas - Mexico Remote2w agoRemote · Customer Experience (CX)
- Customer Support Manager Americas - US Remote2w agoRemote · Customer Experience (CX)
- Account Executive - Chicago Office3w agoChicago Office · Commercial
- Senior Security Engineer4w agoRemote · Engineering & Product