Cloud Security Engineer (Travel and Transportation)

Role overview

Improve cloud and edge security for a large travel technology platform being built to support a new airline operation. You’ll combine hands-on security engineering, incident response, compliance evidence, and practical guidance for teams building and operating the service.

Responsibilities

- Strengthen security across cloud organizations and accounts by improving asset coverage, runtime monitoring, policies, alert integrations, and triage processes. - Operate internet-facing protections, including web application firewalls, bot controls, rate limits, DNS, TLS, and origin routing; tune rules against production traffic and manage allow-list requests. - Coordinate remediation of findings from cloud security scans, code analysis, penetration tests, and customer reports. - Respond to cloud security events such as denial-of-service attacks, exposed credentials, supply-chain alerts, and data-handling issues; maintain detection and response playbooks. - Improve software supply-chain controls through code and dependency scanning, container image hardening, and release security reporting. - Prepare repeatable evidence for security audits, coach engineering teams on security tools, and advise on platform integrations and AI-enabled services.

Requirements

- At least five years in cloud security or security-focused platform engineering, including hands-on Google Cloud experience with Kubernetes, IAM, audit logging, network controls, and log sinks. - Production experience with a cloud security posture or workload protection platform, including policy authoring, integrations, and runtime coverage. - Practical administration of web application firewall, content delivery, and bot-management services at scale. - Strong Terraform skills, including reusable modules, configuration review, drift management, and security tooling. - Experience managing vulnerabilities across infrastructure, containers, and code, plus routing actionable security signals to monitoring and incident tools. - Python or Bash scripting, production incident response, clear technical documentation, and the ability to train engineering teams.

Nice to have

- Experience with AWS or Azure, policy-as-code, identity administration, threat modeling, or security champions programs. - Familiarity with travel or airline systems, payment security, and compliance frameworks such as PCI DSS, SOC 2, ISO 27001, or NIS2. - Experience applying AI-assisted tools to security reporting or issue triage, or relevant cloud security certifications.

Benefits and work setup

The package includes health insurance, flexible remote or hybrid work, professional training, internal learning events, mentorship, wellness activities, referral rewards, and additional leave tied to work anniversaries.