Senior Security Engineer
WeTravel · Remote · Bulgaria · Portugal · Italy · Poland · Spain · Ireland · Lithuania ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote worldwide
- AWS + Kubernetes
- B2B contractor agreement
- Unlimited paid time off
Join the Platform & Infrastructure team at WeTravel, where you will build a secure and scalable environment for travel entrepreneurs. You will own infrastructure vulnerability management, establish detection foundations, and lead cloud security posture initiatives.
The position requires close collaboration with product and platform engineering teams to prioritize remediation and support compliance efforts like SOC 2 and PCI DSS. You will also help secure internal AI tooling and ensure agentic workflows are auditable.
What you'll do
- Own infrastructure vulnerability management across dependencies, containers, and cloud systems
- Prioritize remediation using contextual risk signals like KEV, EPSS, and asset criticality
- Automate security workflows including scanner integrations, finding pipelines, and reporting
- Build detection foundation by ensuring security logging coverage and retention
- Lead cloud security posture management including guardrails and hardening baselines
- Coordinate security incident response and conduct tabletop exercises
- Provide technical evidence for SOC 2, PCI DSS, and customer due diligence obligations
- Secure internal AI tooling and ensure agentic workflows are auditable
What you'll need
- 8+ years in security engineering with depth in operations or cloud security
- Experience with AWS, Kubernetes, and infrastructure as code
- Expertise with security logging, SIEM-class tooling, and managed detection providers
- Hands-on experience running infrastructure vulnerability management at scale
- Experience with SOC 2 and/or PCI DSS technical controls
Nice to have
- Experience securing payments or regulated fintech systems
- Background in detection engineering, threat modeling, or DFIR
- Exposure to EU regulatory obligations like GDPR or ISO27001
- Experience in a product company scaling to enterprise customers
Stack
- AWS
- Kubernetes
- React
- Ruby on Rails
- Go
- Python
- MongoDB
- MySQL
- Postgres
- Snowflake
How you'll work
- Fully remote position
- Work from anywhere for up to four weeks per year
- Full-time B2B contractor agreement
- Monthly payments in USD
What you get
- Unlimited paid time off policy
- Annual team off-site events
- Cycle-to-work scheme or commuting reimbursement
- Extensive paid family leave
- Three paid volunteer days per year
- Discounted rates on hotels and flights via Booking Marketplace
- Cutting-edge equipment and tools provided