{"id":2612121,"url":"https://alion.io/job/coherent-solutions-cloud-security-engineer-travel-and-transportation","title":"Cloud Security Engineer (Travel and Transportation)","company":{"id":673133,"name":"Coherent Solutions","domain":"coherentsolutions.com","url":"https://alion.io/company/coherentsolutions-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bulgaria"],"countries":["BG"],"hiring_countries":["BG"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":40000,"max_usd":93000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"Cloudflare WAF","optional":false},{"name":"Datadog","optional":false},{"name":"Dependabot","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PagerDuty","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Wazuh","optional":false},{"name":"Wiz","optional":false},{"name":"Azure","optional":true},{"name":"Kubernetes","optional":true},{"name":"Least Privilege","optional":true},{"name":"LLM","optional":true},{"name":"Okta","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP SAMM","optional":true}],"status":"live","first_seen_at":"2026-10-15T09:18:12Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-19T01:03:38Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Company Background\nOur client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape.\nProject Description\nYou will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services.\nTechnologies\nGCP, AWS\nWiz\nCloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting\nTerraform\nSonarCloud and Dependabot\nJira, PagerDuty and Slack\nPython and Bash\nWhat You'll Do\nOwn and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack;\nOperate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones;\nTune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively;\nSupport and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure;\nParticipate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks;\nHelp secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams;\nProduce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable;\nEnable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows;\nAdvise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture;\nJob Requirements\n5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP (GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking);\nProduction experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection;\nHands-on administration of a WAF, CDN, and bot-management stack at scale;\nStrong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure;\nExperience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking;\nExperience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack;\nScripting skills in Python or Bash for automation and security reporting;\nSecurity incident-response experience in a production environment, including developing runbooks and managing vendor escalations;\nClear written and verbal communication skills, with the ability to train engineering teams and document security decisions;\nNice To Have\nExperience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling;\nExperience with AWS and Azure;\nFamiliarity with Rego, OPA, or other policy-as-code languages;\nExperience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM;\nExperience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs;\nAirline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting;\nExperience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2;\nCertifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security - Specialty;\nWhat Do We Offer\nThe global benefits package includes:\nTechnical and non-technical training for professional and personal growth;\nInternal conferences and meetups to learn from industry experts;\nSupport and mentorship from an experienced employee to help you professional grow and development;\nHealth insurance;\nSports activities to promote a healthy lifestyle;\nFlexible work options, including remote and hybrid opportunities;\nReferral program for bringing in new talent;\nWork anniversary program and additional vacation days.","description_format":"text","description_chars":5838,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance","Sports activities"],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Technology","Software","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-10-15T11:16:27Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":43,"reasons":["conf:2","urgency","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/coherent-solutions-cloud-security-engineer-travel-and-transportation","json_url":"https://alion.io/job/coherent-solutions-cloud-security-engineer-travel-and-transportation.json","meta":{"generated_at":"2026-10-19T02:08:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1227,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673133},"rest":"https://alion.io/mcp/rest/get_company?id=673133"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcoherent-solutions-cloud-security-engineer-travel-and-transportation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcoherent-solutions-cloud-security-engineer-travel-and-transportation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcoherent-solutions-cloud-security-engineer-travel-and-transportation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/coherent-solutions-cloud-security-engineer-travel-and-transportation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcoherent-solutions-cloud-security-engineer-travel-and-transportation"}]}