Senior Security Engineer

About the role

WeTravel is looking for a Senior Security Engineer to own and scale our infrastructure vulnerability management, detection, and incident response capabilities. You will work closely with product, platform, and engineering teams to ensure a secure, reliable, and compliant environment for our global travel marketplace.

Key responsibilities

• Maintain a central register of infrastructure dependencies, containers, images, and cloud resources, applying risk‑based SLAs and reporting to engineering leadership.
• Prioritize remediation using contextual risk signals such as KEV, EPSS, exposure, and asset criticality.
• Automate security‑finding workflows, including scanner integrations, ticket routing, and reporting.
• Build and maintain security logging coverage, retention, and managed detection & response telemetry.
• Lead cloud security posture management, guardrails, hardening baselines, and CSPM findings triage.
• Coordinate incident response runbooks, tabletop exercises, and post‑incident actions.
• Provide technical evidence for SOC 2, PCI DSS, and customer due‑diligence audits.

Required profile

• 8+ years of security engineering experience with a focus on vulnerability management, cloud security posture, detection, or incident response.
• Hands‑on experience securing large‑scale AWS and Kubernetes environments.
• Proven track record of driving remediation across fleets, images, containers, and dependencies.
• Experience with SOC 2 and/or PCI DSS technical controls.

Required skills

• AWS
• Kubernetes
• Vulnerability scanning and prioritisation (KEV, EPSS)
• Container and image security
• Security logging and SIEM tooling
• SOC 2 compliance
• PCI DSS compliance

What we offer

• Competitive salary and unlimited paid time off.
• Work‑From‑Anywhere perk with up to four weeks of remote work per year.
• Annual team off‑site, cycle‑to‑work scheme, and extensive paid family leave.
• Cutting‑edge equipment and tools to support your success.