Senior Application Security Engineer

Revinate is one of the largest and most innovative providers of direct revenue-generating solutions in the hospitality industry. Revinate's mission is to deliver hoteliers scalable direct revenue and profits from data-driven solutions that cultivate deeper relationships with guests. Revinate’s Direct Booking Platform helps capture, convert and retain guests with strategies and services that maximize direct booking revenue. This combination maximizes the lifetime value of each guest through personalized and targeted campaigns across the guest journey. Revinate Marketing has won 1st place for Hotel CRM & Email Marketing in the HotelTechAwards five years in a row!
About Revinate We support full remote work but also maintain offices in Amsterdam, Singapore and Bend Oregon, Revinate seeks to build specialized and easy-to-adopt technology to solve these challenges. Revinate enables hoteliers to transform their guest data into revenue. With Revinate Marketing and Revinate Guest Feedback, hoteliers are empowered to make smarter decisions, resulting in increased direct revenue and guest engagement. Much like the industry we serve, we are a team of hard-working and passionate individuals who love our customers and are committed to surprising and delighting them with every new innovation and disruption.
The company is backed by leading Silicon Valley investors, including Serent Capital, Benchmark Capital, Tenaya Capital, and Sozo Ventures. Headquartered in San Francisco with regional offices in Amsterdam and Singapore, Revinate counts tens of thousands of the world’s leading hotels as customers.
To learn more, please visit www.revinate.com
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status
What We Believe We believe that hoteliers deserve better. The global hotel sector is a booming $500B+ industry, yet hotels are facing many complex challenges, including increased pressure from online travel agencies and intense competition from ever-growing room inventory and the shared economy. That coupled with aging, cumbersome technology is making the job of the hotelier more difficult than ever. At Revinate, we use cutting edge technology to build powerful software for hotels to take back control and drive direct revenue. The simplicity and beautiful UX of our solutions are a breath of fresh air in an industry of old technology.
Role Overview Revinate is seeking an experienced Senior Application Security Engineer to join our Security Team. This role will focus on securing our applications and product stack while ensuring that our development practices adhere to the highest security standards. You will collaborate closely with application development, data engineering, and various business units to protect Revinate’s employees, data, and technology infrastructure.

Top Three Outcomes for Year One

• Gain an in-depth understanding of Revinate’s business and application stack while taking ownership of the Application Security function, both technically and operationally.
• Lead and execute two major Application Security initiatives, ensuring strong collaboration between the Security team and engineering.
• Ensure all SaaS applications meet Application Security standards, with improvements identified, documented, and tracked to resolution.

What You'll Do

• Own and maintain application security standards and procedures in collaboration with AppDev, Data Science, and Product Teams.
• Drive the implementation of robust application security protocols and practices.
• Oversee daily Application Security monitoring, observability, triage, resolution, and incident response.
• Actively participate in compliance initiatives, including internal and external penetration testing, annual NIST evaluations, and security training for engineering teams.
• Provide 24/7 application security support.
• Monitor and harden existing infrastructure, automation processes, and code to protect against threats to our SaaS applications.
• Manage emerging threats and vulnerabilities, implementing proactive measures to safeguard our systems.
• Stay current on industry trends in security, risk, compliance, and privacy as they relate to application security.
• Ensure security requirements are integrated into the development lifecycle of all systems.
• Enhance and maintain the Identity and Access Management (IAM) framework in collaboration with IT and Security teams.
• Automate security processes using AWS and GCP tools, and develop custom automation solutions.
• Architect and implement en