Senior Security Engineer
WeTravel· Engineering & Product
RemoteFull-timePosted 4w ago
About the role
Senior Security Engineer responsible for infrastructure vulnerability management, infrastructure security posture, incident response, detection, and collaboration with product, platform, and IT teams to secure WeTravel’s cloud and infrastructure stack.
Responsibilities
- Own infrastructure vulnerability management. One central register across infrastructure dependencies, containers, images, and cloud infrastructure. Risk-based SLAs, tracking to closure, exception handling, and reporting for engineering leadership and enterprise customers.
- Prioritize infrastructure remediation using contextual risk signals (KEV, EPSS, exposure, asset criticality, compensating controls) within a common severity model.
- Automate infrastructure-security workflows: scanner integrations, finding pipelines, normalization, ticket routing, and reporting.
- Build our detection foundation: security logging coverage and retention across production, cloud, and identity systems; select and run the managed detection and response partner; ensure telemetry exists and survives.
- Lead infrastructure and cloud security posture management with our platform team: cloud account guardrails, hardening baselines, CSPM findings triage, internet-facing surface inventory, image and container security.
- Coordinate security incident response: incident classification runbooks, tabletop exercises, and post-incident corrective actions; partner with Product Security on product-security incidents.
- Partner with product, platform engineering and IT on remediation; ensure findings arrive triaged, deduplicated, and explained.
- Supply the technical evidence behind SOC 2, PCI DSS, and customer due diligence obligations (access reviews, scan results, patch compliance).
- Collaborate with Product & Platform teams, and support customer-facing security discussions with accurate technical evidence and context.
- AI Related: Maintain and operationalize the Internal AI Use Policy; secure internal AI tooling and agentic workflows; make agentic workflows auditable.
Qualifications
- 8+ years in security engineering with depth in security operations (vulnerability management, cloud security posture, detection, or incident response).
- Experience with AWS and Kubernetes and infrastructure as code.
- Expertise with security logging and SIEM-class tooling and working with a managed detection provider.
- Hands-on experience running infrastructure vulnerability management at scale (scanning fleets, images, containers, dependencies); prioritizing by exploitability (KEV, EPSS, exposure, asset criticality) and driving remediation.
- Experience with SOC 2 and/or PCI DSS technical controls.
Skills
Required:Infrastructure vulnerability managementAWSKubernetesSecurity logging & SIEMSOC 2 / PCI DSS
Benefits
- Competitive salary
- Generous Time to Recharge policy - unlimited paid time off
- Work From Anywhere up to four weeks per year
- 2-week cross-functional onboarding program
- Annual team off-site
- Cycle-to-work scheme or commuting reimbursement
- Extensive paid family leave
- Three paid volunteer days per year
- Cutting-edge equipment and tools
- International, travel-loving team culture
- Access to Booking Marketplace with exclusive travel discounts
Last updated Oct 21, 2026. Interested? Apply on the company site.
About WeTravel
More open roles at WeTravel
- Accounting Manager4d agoRemote · Finance & Operations
- Customer Support Manager Americas - Mexico Remote2w agoRemote · Customer Experience (CX)
- Customer Support Manager Americas - US Remote2w agoRemote · Customer Experience (CX)
- Account Executive - Chicago Office3w agoChicago Office · Commercial
- Senior Security Engineer4w agoHybrid (Amsterdam) · Engineering & Product