Junior SOC Security Engineer

Tripadvisor

About Tripadvisor  The Tripadvisor Group connects people to experiences worth sharing, and aims to be the world’s most trusted source for travel and experiences. We leverage our brands, technology, and capabilities to connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces for experiences, accommodations, restaurants, and other travel categories. The subsidiaries of Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork. We are looking for an experienced Senior Application Security Engineer to join our growing team at Tripadvisor Experiences. In this role, you will take a lead position in securing the applications that power our platform. As a Senior Engineer, you will design and implement advanced security measures, mentor junior engineers, and play a key role in ensuring the security of our products and infrastructure. This is a fantastic opportunity to influence our security practices and help shape the future of application security within the organisation. This role is based remotely in Poland. We hire based on a permanent contract (UoP). What You’ll Do: * Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management. * Conduct in-depth threat modelling and risk assessments to identify and mitigate potential security risks. * Performing manual security assessments including code reviews. * Act as a Subject Matter Expert (SME)  for security breaches, including performing root cause analysis and creating corrective actions related to security vulnerabilities. * Develop and enforce application security policies across multiple engineering teams, ensuring consistency and scalability. * Mentor and train junior engineers, helping them improve their security knowledge and practices. * Provide expert advice on security architecture and design for new features and systems. * Collaborate with engineering and product teams to integrate security requirements into software development lifecycles. * Champion security initiatives by advocating for prioritisation of security issues and resolution of technical debt. * Stay up to date with the latest security threats and industry best practices, ensuring that the team remains proactive in its approach to security. What You’ll Need: * Extensive experience in application security, including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response. * Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines. * Strong understanding of advanced security concepts such as encryption, secure software design, identity management, and API security. * Experience with cloud security (AWS, Azure, etc.) and securing microservices architectures. * Proven leadership skills, with the ability to guide and mentor other engineers and influence security practices across teams. * Excellent communication and collaboration skills, with a track record of working closely with cross-functional teams to improve security posture. * 4+ years experience working as a Security Engineer / Application Security Analyst Preferred Qualifications: * Experience with regulatory frameworks (e.g., GDPR, PCI-DSS, SOC 2) and their integration into security processes. * Industry-recognised security certifications (e.g., OSCP, OSCE, or similar). * Familiarity with the latest security tools and frameworks to proactively identify vulnerabilities and mitigate threats. * A passion for mentoring and developing others, with a commitment to continuous learning and improvement. What We Offer  * Competitive compensation packages (routinely benchmarked against the latest industry data), including base salary and annual bonuses * “Work your way” with flexibility to suit your lifestyle. Tripadvisor Group takes a remote-friendly approach to collaboration across a worldwide team, with the option to join on-site as often as you’d like or as required by your team. * Flexible schedule. Work-life balance is ingrained in our culture by design. Trust and accountability make it work. * Donation matching. Give back? Give more! We match qualifying charitable donations annually. * Tuition assistance. Want to level up your career? We love to hear it! Receive annual support for qualified programs. * Lifestyle benefit. An annual benefit to spend on yourself. Use it on travel, wellness, or whatever suits you. * Travel perks. We believe that travel is employee development, so we provide discounts and more. * Employee assistance program. We’re here for you with resources and programs to help you through life’s challenges. * Health benefits. We offer great coverage and competitive premiums. * Generous referral scheme. Help us grow and be rewarded with generous awards for referring successful candidates.   Our Cultural Pillars: Traveler first We exist to create value for our customer, the traveler. We enable our suppliers and partners to unlock this value. Their collective behaviors and insights are what drives us.  Execution is our edge We act fast, experiment, learn from failure, iterate, and improve the solutions of tomorrow across every aspect of our business. Our execution is agile, data-driven, prioritised, and built to scale. We assume no problem is someone else’s problem and finish what can be done today, knowing tomorrow will bring fresh challenges.  We succeed together The best outcomes are driven by empathic, humble, and diverse subject matter experts working toward shared goals. We collaborate relentlessly, challenge assumptions, give actionable feedback, and set each other up for success through empowered teams with a clear charter. We transparently take ownership of our growth, individually and as a team. We celebrate the quality of our effort, our learnings, and our collective achievements.   We strive to create an accessible and inclusive experience for all candidates. If you need a reasonable accommodation during the application or the recruiting process, please make sure to reach out to your individual recruiter or our team at AccessibleRecruiting@tripadvisor.com. If you have any additional questions about careers at Tripadvisor you can email us at recruitment@tripadvisor.com. We have all the answers!

Contentsquare

Contentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey.   We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further.   Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other.   Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog. Contentsquare is looking for a Junior Security Automation Engineer to join our Development, Security, and Operations Team (DevSecOps). Reporting directly to a Senior Cybersecurity Engineer, you will play a crucial role in scaling our security capabilities by automating security toolings, workflows, and threat detection mechanisms. Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the integrity of our products and keep our users safe by building automated, resilient, and scalable security defenses.

Deliveroo

Why Deliveroo Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it. We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.   ABOUT THE ROLE As a Senior Corporate Security Engineer, you will lead the design and operation of security controls that protect our internal networks, workforce identities, endpoints and corporate systems. You will be working globally with security teams across US, EU and APAC, delivering against our goals and objectives - reducing risk and maturing controls.   As a Senior, you will operate with a high degree of autonomy. You will define technical direction, make architectural decisions, and deliver complex security initiatives end-to-end. You will be expected to balance risk reduction with usability, ensuring controls are robust without impeding employee productivity. This role focuses on Identity and Access Management (IAM), Endpoint security (EDR), Network Security, logging and detection engineering, and secure SaaS enablement. You will work closely with IT, Legal, Privacy, Engineering and business stakeholders to embed security as a default practice across the organisation.   Security controls will be aligned to recognised frameworks such as the CIS Critical Security Controls and the NIST Cybersecurity Framework (CSF).     KEY RESPONSIBILITIES * Architecture & Control Implementation: Design, deploy, and maintain core corporate security controls, including phishing-resistant MFA, Just-In-Time (JIT) access, strict role-based access control (RBAC), zero-trust architectures, device and identity bound proofing and modern network isolation. * Tooling Ownership: Serve as the technical owner for a broad suite of corporate security systems, managing deployments, configurations, and API integrations for tools across the corporate environment. * Technical Leadership: Lead and implement the technical strategy for Endpoint Device trust, Data Loss Prevention, Intellectual property storage, and SaaS application security. Alongside wider corporate security technical controls. * Automation & Engineering: Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection for compliance. * Cross-Functional Collaboration: Work with IT and business operations to integrate security tools into everyday workflows. Guide non-security teams to adopt secure baselines (e.g., CIS Benchmarks) as standard practice. * Mentorship: Mentor junior and mid-level engineers, explain technical concepts clearly to non-technical staff, and help improve the team's engineering standards. MINIMUM QUALIFICATIONS * Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. * 5+ years’ experience in Security Engineering, Corporate Security, Detection & Response, or a related field. * Hands-on experience administering IAM platforms (e.g. Okta, GoogleWorkspace). * Deep hands-on experience with GoogleWorkspace products * Practical hands-on experience with Cloud platforms (e.g AWS, GCP) * Relevant and practical experience with Infrastructure-as-code (e.g Terraform) * Experience implementing modern authentication standards (FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect). * Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling. * Experience operating SIEM and/or SOAR platforms and tuning detection logic. * Experience with vulnerability management and patch governance. * Ability to write production-quality automation scripts. * Demonstrated experience leading cross-functional technical initiatives.   DESIRABLE SKILLS * Experience with SASE or Zero Trust Network Access platforms. * Hands on experience deploying applications into K8 and Docker environments * Data Loss Prevention (DLP) and SaaS security governance. * Advanced detection engineering or SOAR playbook development. * Experience supporting ISO 27001 or SOC 2 audits. * Relevant certifications (e.g. CISSP, CISM, GIAC).   Workplace & Benefits At Deliveroo we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information. Diversity At Deliveroo, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry. We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.