Senior Application Security Engineer (Viator)

<p>Viator, a Tripadvisor company, is the leading marketplace for travel experiences. We believe that making memories is what travel is all about. And with 300,000+ travel experiences to explore—everything from simple tours to extreme adventures (and all the niche, interesting stuff in between)—making memories that will last a lifetime has never been easier. With industry-leading flexibility and last-minute availability, it's never too late to make any day extraordinary. Viator. One app, 300,000+ travel experiences you’ll remember.</p> <p>We are looking for an experienced <strong>Senior Application Security Engineer</strong> to join our growing team at Viator. In this role, you will take a lead position in securing the applications that power our platform. As a Senior Engineer, you will design and implement advanced security measures, mentor junior engineers, and play a key role in ensuring the security of our products and infrastructure. This is a fantastic opportunity to influence our security practices and help shape the future of application security within the organisation.</p> <p>Viator is a remote-first company. This role is based remotely in Poland. We hire based on a permanent contract (UoP)/</p> <p><strong>What You’ll Do:</strong></p> <ul> <li>Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management.</li> <li>Conduct in-depth threat modelling and risk assessments to identify and mitigate potential security risks.</li> <li>Performing manual security assessments including code reviews.</li> <li>Act as a Subject Matter Expert (SME)  for security breaches, including performing root cause analysis and creating corrective actions related to security vulnerabilities.</li> <li>Develop and enforce application security policies across multiple engineering teams, ensuring consistency and scalability.</li> <li>Mentor and train junior engineers, helping them improve their security knowledge and practices.</li> <li>Provide expert advice on security architecture and design for new features and systems.</li> <li>Collaborate with engineering and product teams to integrate security requirements into software development lifecycles.</li> <li>Champion security initiatives by advocating for prioritisation of security issues and resolution of technical debt.</li> <li>Stay up to date with the latest security threats and industry best practices, ensuring that the team remains proactive in its approach to security.</li> </ul> <p><strong>What You’ll Need:</strong></p> <ul> <li>Extensive experience in application security, including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response.</li> <li>Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines.</li> <li>Strong understanding of advanced security concepts such as encryption, secure software design, identity management, and API security.</li> <li>Experience with cloud security (AWS, Azure, etc.) and securing microservices architectures.</li> <li>Proven leadership skills, with the ability to guide and mentor other engineers and influence security practices across teams.</li> <li>Excellent communication and collaboration skills, with a track record of working closely with cross-functional teams to improve security posture.</li> <li>4+ years experience working as a Security Engineer / Application Security Analyst</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <ul> <li>Experience with regulatory frameworks (e.g., GDPR, PCI-DSS, SOC 2) and their integration into security processes.</li> <li>Industry-recognised security certifications (e.g., OSCP, OSCE, or similar).</li> <li>Familiarity with the latest security tools and frameworks to proactively identify vulnerabilities and mitigate threats.</li> <li>A passion for mentoring and developing others, with a commitment to continuous learning and improvement.</li> </ul> <p><strong>Perks of Working at Viator</strong></p> <ul> <li><strong>Competitive compensation packages</strong>, including base salary and annual bonus</li> <li><strong>“Work your way”</strong> with flexibility to suit your lifestyle. We take a remote-friendly approach to collaboration, with the option to join on-site as often as you’d like in select locations. </li> <li><strong>Flexible schedule</strong>. Work-life balance is ingrained in our culture by design. Trust and accountability make it work.</li> <li><strong>Donation matching</strong>. Give back? Give more! We match qualifying charitable donations annually.</li> <li><strong>Tuition assistance</strong>. Want to level up your career? We love to hear it! Receive annual support for qualified programs.</li> <li><strong>Lifestyle benefit</strong>. An annual benefit to spend on yourself. Use it on travel, wellness, or whatever suits you.</li> <li><strong>Travel perks</strong>. We believe that travel is employee developm