Security Engineer

Hi! I’m George 👋 Head of Platform & Infrastructure here at WeTravel.

I joined WeTravel to help build a secure, reliable, and scalable IT environment as we grow. Our team’s mission is to empower every WeTravel employee with the tools and support they need to work efficiently, securely, and without friction - no matter where they are in the world.

Think of the most incredible adventures imaginable: trekking to Machu Picchu, cycling through Tuscany, or going on a safari in Kenya. For years, the small businesses and local experts who run these trips have been stuck using messy spreadsheets, countless emails, and complicated payment methods.

WeTravel is changing that. We build the tools that empower any entrepreneur to launch and grow their own travel business. Our platform makes it simple for organizers to create beautiful trip proposals, securely process payments, and manage their customers, so they can focus on what they do best: creating amazing experiences.

This is one of the last great frontiers of travel to come online, and as the category leader, we are at the forefront of this change. Last year alone, our platform was trusted by 8,000 organizers to lead over a million travelers on adventures in 150+ countries. Now, we're on an exciting journey to grow from powering $1B to $10B in travel experiences per year.

We believe that every trip, when done right, can be a force for good - and we're building the engine to make more of that possible.

AI Related

• 8+ years in security engineering, with real depth in security operations: vulnerability management, cloud security posture, detection, or incident response.
• Experience with AWS and Kubernetes, and the ability to reason about infrastructure as code.
• Expertise with security logging and SIEM-class tooling, and with working through a managed detection provider.
• Hands-on experience running infrastructure vulnerability management at scale: scanning fleets, images, containers and dependencies, prioritizing by exploitability (KEV, EPSS, exposure, asset criticality), and driving remediation through the teams that own the systems
• Experience with SOC 2 and/or PCI DSS technical controls.
• Experience securing payments or regulated fintech systems.
• Detection engineering, threat modeling, or DFIR experience.
• Exposure to EU regulatory obligations (GDPR Art. 33/34, the Cyber Resilience Act), and ISO27001
• Experience in a product company scaling from mid-market to enterprise customers.

We’re focused on the impact. We don’t subscribe to any one framework or execution ideology, and we adapt based on what’s impactful.We’re using the latest hardware and constantly on the look out for better tools & ways to work

Stack: We’re using React/ReactNative/TypeScript + Ruby on Rails, Go and Python Microservices on Kubernetes. We also use and love MongoDB, MySQL, Postgres, Snowflake and we’re working with the major LLM providers.

Equal Opportunities

WeTravel is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applicants from all backgrounds, experiences, and perspectives. If you're excited about this opportunity and believe you're a good fit, we encourage you to apply and join us in transforming the travel industry!