Security Engineer

Travel. It's one of life's simple pleasures. But, ooof, planning it can feel like hard work. For the last 18 years we've been on a mission to empower every traveller with innovative tools, insights and experiences that help people get to where they're going, so they can spend more time out exploring the world, and less time anxiously bouncing around 25 browser tabs and endless spreadsheets. Our traveller-first approach drives everything we do and it's never been more important than it is today.

When we launched as a flight comparison site back in 2003, we changed the game by helping travellers feel like they were in on a secret, that promise hasn't changed. And today, while we're a world leader in travel, with millions of people using our products every single day we know there's so much more we can be doing.

Being part of Skyscanner means joining a team hell bent on building the world's most innovative, and helpful travel experiences possible. We're hugely bold and believe we have the chance to genuinely challenge and disrupt the industry.

About the job:

This role plays a leading part in ensuring Skyscanner’s teams are taking all required steps in building a secure product used by more than 90 million travellers. 

You'll play a leading role in protecting Skyscanner against security risks, by implementing ground breaking measures to minimise exposures and vulnerabilities. We will look toward your experience and skills to tackle problems at scale. Whether influencing a roadmap to address a technical security hurdle, protecting our customers' data or consulting on a wide range of security topics - you'll be empowered to engage and work cross-functionally.

You'll assist the Security team in setting the vision, roadmap, assessing risks and efforts to secure our Products, Applications and Mobile presence. As a member of the team, you’ll need to be proactive, humble and eager to learn. And whatever the problem, you’ll connect the dots to help find the right solution by sharing ideas and working with your team to deliver.

Key Responsibilities and Criteria

• Contribute to the Security roadmaps, sharing ideas with the rest of the squad and find opportunities to share with other teams across the business
• Working closely with legal, compliance and product engineering teams in helping to shape and implement data privacy and data security requirements
• Using your previous experience working in a Distributed Systems (ideally DevOps) environment to ensure the Security of our Products at scale
• Experience of scaled Security Programs ideally in a B2C environment
• You’ll understand the challenges of a cloud and containers environment (AWS, Kubernetes, Docker preferred)
• A growth mindset, with the ability to connect it to organisational awareness, and not be afraid to learn or make mistakes
• Contribute to flexible information security governance, policy, processes and procedures across the global business
• Familiar with one or more Security Domains and with Security tooling (Burp proxy, Web/Network Scanners, Static code analyzers, etc.)
• Contribute to leading supply chain and third party risk along with security due diligence
• Deliver security awareness training programmes in collaboration with the rest of Security and our Learning and Development team
• Ability to influence team members within the organisation
• Embody our values, especially keeping the traveller at the centre of all considerations

Already a global leader, we want to elevate the way we work to a whole other level. In return, you’ll get meaningful things like medical insurance, headspace subscriptions, a home office allowance and the option to buy more holiday. You’ll have the opportunity to work from any country for 4 weeks a year, and 30 days in our other global offices. Everything, in other words, to help you relax and give your best.

For more details on Engineering at Skyscanner, check our Engineering Blog and follow Skyscanner Engineering on Twitter.