Wetravel

Overview

Own infrastructure vulnerability management, automate infrastructure-security workflows, build detection foundations, lead infrastructure and cloud security posture management, and coordinate security incident response.

About Wetravel

WeTravel builds the tools that empower any entrepreneur to launch and grow their own travel business, helping organizers create trip proposals, securely process payments, and manage customers.

Requirements & Eligibility

• 8+ years in security engineering, with real depth in security operations: vulnerability management, cloud security posture, detection, or incident response.
• Experience with AWS and Kubernetes, and the ability to reason about infrastructure as code.
• Expertise with security logging and SIEM-class tooling, and with working through a managed detection provider.
• Hands-on experience running infrastructure vulnerability management at scale: scanning fleets, images, containers and dependencies, prioritizing by exploitability, and driving remediation through the teams that own the systems.
• Experience with SOC 2 and/or PCI DSS technical controls.

Key Responsibilities

• Own infrastructure vulnerability management across infrastructure dependencies, containers, images, and cloud infrastructure.
• Prioritize infrastructure remediation using contextual risk signals such as KEV, EPSS, exposure, and asset criticality.
• Automate infrastructure-security workflows including scanner integrations, finding pipelines, normalization, ticket routing, and reporting.
• Build our detection foundation, ensuring security logging coverage and retention across production, cloud, and identity systems.
• Lead infrastructure and cloud security posture management with the platform team.
• Coordinate security incident response including incident classification runbooks, tabletop exercises, and post-incident corrective actions.