Senior Application Security Engineer

• Join Tripadvisor, the travel group behind Tripadvisor, Viator and TheFork, in a permanent London-based role. • Take a lead position securing the applications that power Tripadvisor Experiences. • Design and implement advanced security measures across products and infrastructure. • Act as the subject matter expert for security breaches and root cause analysis. • Mentor junior engineers and raise security knowledge across engineering teams. • Help shape the future of application security within the organisation.

• Bring 4+ years of experience as a Security Engineer or Application Security Analyst. • Show extensive application security experience across secure coding, threat modelling and vulnerability assessments. • Bring hands-on incident response experience. • Use SAST and DAST security testing tools and integrate them into development pipelines. • Apply a strong understanding of encryption, secure software design, identity management and API security. • Bring experience with cloud security on AWS, Azure or similar, and securing microservices. • Guide and mentor other engineers and influence security practices across teams. • Communicate and collaborate well with cross-functional teams to improve security posture. • Be based in London on a permanent contract.

• Bring experience with regulatory frameworks such as GDPR, PCI-DSS or SOC 2. • Hold an industry-recognised security certification such as OSCP or OSCE. • Show familiarity with the latest security tools and frameworks for identifying vulnerabilities. • Bring a passion for mentoring others and a commitment to continuous learning.

• Lead the design and implementation of advanced security measures, including encryption, secure APIs and identity management. • Conduct in-depth threat modelling and risk assessments to identify and mitigate risks. • Perform manual security assessments, including code reviews. • Act as subject matter expert on security breaches, running root cause analysis and defining corrective actions. • Develop and enforce application security policies across multiple engineering teams. • Mentor and train junior engineers to improve their security practices. • Advise on security architecture and design for new features and systems. • Integrate security requirements into software development lifecycles with engineering and product teams. • Champion security initiatives and push for resolution of technical debt. • Track the latest security threats and industry best practices.

• Join on a permanent contract with a competitive compensation package, including base salary and annual bonuses. • Work flexibly with a remote-friendly approach to collaboration across a worldwide team. • Enjoy a flexible schedule in a culture built around work-life balance. • Get health benefits with competitive premiums. • Use an annual lifestyle benefit to spend on travel, wellness or whatever suits you. • Receive annual tuition assistance for qualified programmes. • Get travel perks and discounts. • Benefit from charitable donation matching. • Access an employee assistance programme and a generous referral scheme.

The Tripadvisor Group connects people to experiences worth sharing and aims to be the world’s most trusted source for travel and experiences. Its brands include Tripadvisor, Viator and TheFork, spanning two-sided marketplaces for experiences, accommodations and restaurants. The group is listed on the Nasdaq as TRIP.