Security Engineer

At Omio, we have a unique approach to travel. Our pioneering search platform provides a seamless way to find and book the fastest, cheapest and best travel options by train, bus, flight and ferries to thousands of cities, towns and villages across Europe, the United States and Canada. That translates not only into financial savings for you but also means you have more time on your hands to enjoy your travel experiences! We are a founder-led business and our amazing CEO, Naren Shaam, is as passionate about Omio now  as he was on day one. 

We are looking for a capable Senior Security Engineer, who enjoys security work and possesses both deep and wide expertise in the security space.

You will make things more secure by protecting system boundaries, keeping computer systems and network devices hardened against attacks and securing highly sensitive data. Qualified candidates will have a background in cyber security engineering.

What you will do:

• Design, implement, operate and assess the effectiveness of the security measures for the protection of computer systems, mobile devices, networks and information
• Identify and define the system security requirements and perform security assessments to find out potential gaps and improvement areas
• Perform periodic vulnerability assessments against the systems and coordinate the remediation process with the stakeholders in different teams
• Organize the penetration tests with the independent experts and manage the bug bounty program
• Implement the SIEM technology and monitor the security alerts, perform the incident response processes
• Support the security team for the compliance activities like PCI-DSS, ISO 27001 and others
• Support the security team for internal and external audits to make the company aware of the potential threats and the risks targeting Omio and the customers
• Work with Enterprise IT, Developers and the SRE teams collaboratively to manage the cyber hygiene across the company

Our technology stack is ever-evolving, here is the current snapshot:

• Cloud environment like Google, AWS and Microsoft
• Container technologies
• Fully automated CI/CD on the scale of 500 micro-services
• Non-Microsoft (AD Domain) environment

What you bring to the team:

• Proven work experience as a security engineer
• Security monitoring technologies like SIEM, SOAR
• Endpoint security solutions like AV, EDR
• Good understanding of network security technologies like firewall, IPS, Web application firewall and others
• Vulnerability and patch management process and tool experience
• Deep knowledge and experience with network security, system security and SDLC security
• Cloud security experience is preferred
• Thorough understanding of the latest security principles, techniques, and protocols
• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols
• Problem solving skills and ability to work under pressure
• BS/MS degree, preferably engineering