Senior Application Security Engineer
Core
Design and implement advanced application security measures, conduct threat modelling, and secure the applications powering Tripadvisor's travel platform.
Role type
Senior Application Security Engineer
Builds
Secure travel experiences platform and infrastructure
Domain
Travel technology / Application Security
Deliverable
production ML models | product features | infrastructure
Required skills
Application security, secure coding practices, threat modelling, vulnerability assessments, incident response, SAST/DAST integration, encryption, secure software design, identity management, API security, cloud security (AWS/Azure), microservices security
Preferred skills
Regulatory frameworks (GDPR, PCI-DSS, SOC 2), security certifications (OSCP, OSCE)
Technologies
AWS, Azure, SAST, DAST
Responsibilities
Lead design and implementation of advanced application security measures, conduct in-depth threat modelling and risk assessments, perform manual security assessments including code reviews, act as SME for security breaches and root cause analysis, develop and enforce application security policies, mentor and train junior engineers, provide expert advice on security architecture, collaborate with engineering teams to integrate security requirements, champion security initiatives
Seniority
Senior, hands-on IC with mentorship
