Senior Application Security Engineer - Remote

Overview

Viator, a Tripadvisor company, is the leading marketplace for travel experiences. We believe that making memories is what travel is all about. And with 300,000+ travel experiences to explore—everything from simple tours to extreme adventures (and all the niche, interesting stuff in between)—making memories that will last a lifetime has never been easier. With industry-leading flexibility and last-minute availability, it's never too late to make any day extraordinary. Viator. One app, 300,000+ travel experiences you’ll remember.

In Short

• Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management.
• Conduct in-depth threat modelling and risk assessments to identify and mitigate potential security risks.
• Perform manual security assessments including code reviews.
• Act as a Subject Matter Expert (SME) for security breaches, including performing root cause analysis and creating corrective actions related to security vulnerabilities.
• Develop and enforce application security policies across multiple engineering teams.
• Mentor and train junior engineers in security knowledge and practices.
• Provide expert advice on security architecture and design for new features and systems.
• Collaborate with engineering and product teams to integrate security requirements into software development lifecycles.
• Champion security initiatives by advocating for prioritization of security issues.
• Stay up to date with the latest security threats and industry best practices.

Requirements

• Extensive experience in application security, including secure coding practices, threat modelling, and incident response.
• Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines.
• Strong understanding of advanced security concepts such as encryption and API security.
• Experience with cloud security (AWS, Azure) and securing microservices architectures.
• Proven leadership skills to guide and mentor other engineers.
• Excellent communication and collaboration skills.
• 4+ years experience as a Security Engineer / Application Security Analyst.

Benefits

• Competitive compensation packages, including base salary and annual bonus.
• Flexibility to suit your lifestyle with a remote-friendly approach.
• Flexible schedule promoting work-life balance.
• Donation matching for charitable contributions.
• Tuition assistance for career development.
• Annual lifestyle benefit for personal spending.
• Travel perks for employee development.
• Employee assistance program for life challenges.
• Health benefits with great coverage and competitive premiums.