Cloud Security Engineer (Travel and Transportation)
Core
Own and continuously improve cloud security posture across GCP and AWS accounts, operate edge security layers, manage vulnerability remediation, and support compliance for a new airline operation.
Role type
Senior Cloud Security Engineer
Builds
Cloud-native security controls, edge protection, and secure software supply chain for travel technology platforms
Domain
Cloud Security, Travel Technology
Required skills
Cloud security (GCP, AWS), CNAPP/CSPM platforms (Wiz), WAF/CDN/Bot management, Terraform, Vulnerability management (SAST/SCA), Security incident response, Python/Bash scripting
Preferred skills
AI-assisted security automation, AWS/Azure, Policy-as-code (Rego/OPA), IAM tooling, OWASP SAMM, Travel industry compliance (PCI DSS, SOC 2)
Technologies
GCP, AWS, Wiz, Cloudflare, Terraform, SonarCloud, Dependabot, Jira, PagerDuty, Slack, Python, Bash
Responsibilities
Develop custom security policies and integrate with incident management tools; Tune edge security rules based on production traffic; Automate vulnerability intake and remediation tracking; Respond to security incidents and maintain detection runbooks; Secure software supply chain via SAST and dependency scanning; Produce technical evidence for SOC 2, PCI DSS, and ISO 27001; Train engineering teams on security tooling
Seniority
Senior, hands-on IC
