Travala Jobs & Careers

Tired of cold applications?

Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.

Responsibilities

The Lead Security Engineer will design and implement security controls across AWS cloud infrastructure and engineering platforms. They will embed security into the development lifecycle through DevSecOps practices and lead technical responses to complex security incidents.

Requirements

Requires 5+ years of experience in Security Engineering or DevSecOps within cloud-native environments like SaaS or Web3. Candidates must have strong expertise in AWS security services, Linux, Python/Bash scripting, and Terraform.

Full job description

About Travala

Founded in 2017 and now backed by industry giant Binance, Travala is the leading crypto-native travel booking service, offering 2,200,000+ properties across 230 countries, 600+ airlines, 50,000+ car rental locations, and 400,000+ activities globally.

Travala is a champion of cryptocurrency adoption, accepting over 100 leading cryptocurrencies alongside traditional payment methods. In addition to unbeatable prices via its Best Price Guarantee, Smart members on Travala can also enjoy additional discounts and loyalty rewards for eligible bookings made on the platform.

By incorporating next-generation blockchain technology and tokenised loyalty rewards, Travala.com is creating a cutting-edge experience at the intersection of Web3 and travel.

Position Overview

Location: Hanoi, Vietnam (Hybrid)

We're looking for a hands-on Lead Security Engineer to help build and scale Security at Travala.

As a foundational member of our newly expanding Hanoi security hub, you'll own the design, implementation, and continuous improvement of security across our AWS cloud infrastructure, engineering platforms, and development lifecycle.

Working closely with the Head of Security, you'll help build secure-by-default systems, automate security wherever possible, and shape the technical foundation of our Security program.

Key Responsibilities

Build Secure Cloud Platforms: Design, implement, and continuously improve security controls across AWS, including IAM, VPC, Security Groups, CloudTrail, GuardDuty, AWS Config, KMS, and Secrets Manager.
Harden Infrastructure: Secure Linux servers, containers, Kubernetes, and production environments through system hardening, Zero Trust architecture, network segmentation, WAF, VPN, DNS security, and load balancer protection.
Embed Security into Engineering: Build secure CI/CD pipelines and integrate security throughout the software development lifecycle using Infrastructure as Code, container image scanning, secrets detection, SAST, dependency scanning, and other DevSecOps practices.
Automate Security: Develop security tooling, automation, and engineering integrations using Python, Bash and cloud-native services to improve efficiency and reduce operational risk.
Design Secure Systems: Lead threat modeling, security architecture reviews, and technical risk assessments to ensure secure-by-default platforms and infrastructure.
Lead Technical Response: Act as the Tier-3 escalation point for complex security incidents, perform root cause analysis, improve security controls and runbooks, and mentor the Security Operations Specialist.

Requirements

5+ years of hands-on experience in Security Engineering, Cloud Security, Infrastructure Security, or DevSecOps within SaaS, FinTech, Web3, or other cloud-native technology environments.
Proven experience designing, implementing, and operating security controls in AWS production environments.
Cloud & Platform Security: Strong expertise in AWS security services, IAM, networking, encryption, logging, and cloud-native security controls.
Infrastructure & Network Security: Hands-on experience securing Linux, Docker, networking, Zero Trust architectures, and production infrastructure.
DevSecOps: Experience securing CI/CD pipelines, Infrastructure as Code (Terraform preferred), container platforms, and cloud-native applications.
Automation: Strong scripting skills using Python/ Bash, or similar languages.
Languages: Fluency in Vietnamese; Professional English proficiency for collaborating with international ecosystem partners.

Nice to have:

Experience with Web3 infrastructure, blockchain security, digital asset platforms, or cryptocurrency ecosystems.
Familiarity with Application Security, SDLC security, API security, or cloud security architecture.

Benefits

Compensation: Competitive base salary commensurate with experience and technical proficiency, plus a 13th-month salary and performance bonus.
Health & Wellness: Social insurance, 24/7 accident insurance, annual health check-up, and premium private healthcare coverage.
Premium Tools: High-end MacBook and all necessary peripherals.
Travel Perks: Access to Smart Platinum tier on Travala.com for exclusive discounts and rewards.
Work-Life Balance: Hybrid working mode and a dynamic, international company culture.
Growth: Dedicated annual budget for courses, certifications, and tech conferences.
Community: Free snacks/coffee, team bonding activities, domestic and overseas company trips, and year-end celebrations.

Related keywords

AWSDevSecOpsCloud SecurityIAMVPCCloudTrailGuardDutyAWS ConfigKMSSecrets ManagerLinuxKubernetesZero TrustWAFVPNDNS Security

Jobs at Travala (Now Hiring) — 4 open

Lead Security Engineer (Cloud & DevSecOps)

Security Operations (SecOps) Engineer

Lead Security Engineer (Cloud & DevSecOps)

Security Operations (SecOps) Engineer

Lead Security Engineer (Cloud & DevSecOps)

Tired of cold applications?

Responsibilities

Requirements

Full job description

Requirements

Benefits

Related keywords

About Travala

About Travala

Similar companies hiring

Tools

Explore

Platform

Clera

Tools

Explore

Platform

Clera