Head of Platform & Infrastructure (Security Engineering)

Core Responsibilities:

Own infrastructure vulnerability management with a centralized register across infrastructure dependencies, containers, images, and cloud infrastructure. Key tasks include:

• Define and enforce risk-based SLAs, tracking vulnerabilities to closure, and handling exceptions with reporting for engineering leadership and security teams.
• Prioritize remediation using contextual risk signals like KEV, EPSS, exposure, and asset criticality within a unified severity model.
• Automate security workflows: integrate scanners, streamline finding pipelines, normalize findings, route tickets, and generate reports. Ensure no manual assembly of quarterly data.
• Build a robust detection foundation by ensuring comprehensive security logging coverage and retention across production, cloud, and identity systems. Select and implement a managed detection and response partner.
• Lead cloud security posture management, including cloud account guardrails, hardening baselines, CSPM findings triage, internet-facing surface inventory, and image/container security.
• Coordinate security incident response: develop incident classification runbooks, conduct tabletop exercises, and implement post-incident corrective actions. Partner with Product Security on product-security vulnerabilities and customer-facing risks.
• Collaborate with product, platform engineering, and IT teams to ensure findings are triaged, deduplicated, and explained. Provide technical evidence for SOC 2, PCI DSS, and customer due diligence obligations (e.g., access reviews, scan results, patch compliance).
• Support customer-facing security discussions with accurate technical evidence and context.

AI Security Responsibilities:

• Participate in maintaining and operationalizing the Internal AI Use Policy and its applications.
• Secure internal AI tooling and agentic workflows by managing data access, identity, credentials, permissions, logging, and inappropriate behavior detection.
• Ensure agentic workflows are auditable by tracking actions, data access, tools used, and identities involved.

Technical Stack:

We use React/React Native/TypeScript, Ruby on Rails, Go, and Python microservices on Kubernetes. Our database stack includes MongoDB, MySQL, Postgres, and Snowflake. We also work with major LLM providers.

About WeTravel:

WeTravel empowers entrepreneurs to launch and grow travel businesses using our platform. Our mission is to simplify trip proposals, secure payments, and manage customers, enabling organizers to focus on creating amazing experiences. Last year, our platform was trusted by 8,000 organizers to lead over 1 million travelers across 150+ countries. We aim to grow from $1B to $10B in travel experiences annually.