Cyber Security Engineer- AppSec & Cloud

Who We Are

Yanolja Go Global is a leading B2B wholesaler in the travel industry, specialising in hotel accommodations, transfers, and car rentals.

With over 20,000 partners and 30 offices worldwide, we operate across Europe, the Americas, and Asia. Our advanced technology provides real-time access to products via XML, online portals, and white-label solutions. With a diverse, multicultural team, we deliver innovative solutions and 24/7 service to our partners.

The Role

Yanolja Go Global is seeking a talented and motivated Cybersecurity Engineer – AppSec & Cloud to join our Global Security team.

In this role, you will play a key part in strengthening the security of our applications, cloud infrastructure, and development lifecycle. You’ll collaborate closely with engineering, DevOps, and product teams to identify vulnerabilities, improve architectural resilience, and ensure secure delivery of technology across the organisation.

This position is ideal for a hands-on security professional with strong analytical skills and a passion for application and cloud security.

Key Responsibilities

• Conduct application security assessments, review new features, and provide input on secure design and architecture decisions.

• Perform secure code reviews, identifying vulnerability classes and insecure design patterns.

• Review and validate findings from SAST, DAST, and SCA tools; assess impact and exploitability; and guide teams in prioritising remediation.

• Monitor cloud security posture using leading security platforms; identify misconfigurations and coordinate remediation with engineering.

• Track vulnerabilities from identification to resolution, ensuring timely closure and proper documentation.

• Collaborate with DevOps teams to enhance CI/CD security, secrets management, and access control practices.

• Support external penetration tests and architecture reviews, coordinating remediation efforts with internal stakeholders.

• Develop and maintain internal security documentation, best practices, and technical guidelines to promote secure development.

Qualifications

• 2–3 years of experience in Security Engineering, Application Security, Cloud Security, or a related technical field.

• Strong understanding of application security principles and common vulnerability classes (OWASP Top 10).

• Ability to read and review code in C#/.NET or Java with a focus on security implications.

• Hands-on experience with AWS or Azure, including IAM, network configurations, and monitoring tools.

• Solid understanding of cloud misconfigurations and remediation methods.

Preferred Skills & Experience

• Experience with cloud security platforms such as Wiz, Aqua, Orca, or similar.

• Knowledge of offensive security concepts, exploitation techniques, or penetration testing.

• Experience serving as a primary AppSec/CloudSec point of contact or leading security initiatives.

• Contributions to open-source security projects, technical blogs, or bug bounty programs.

• Strong curiosity and commitment to continuous professional growth.

Why Yanolja Go Global?

• Join our founding Security team and help shape our global application and cloud security strategy.

• Collaborate with R&D and DevOps teams across multiple regions in a supportive, innovative environment.

• Access real-world, high-impact projects involving cutting-edge security tools and cloud platforms.

• Grow your career in a dynamic organisation that values curiosity, learning, and ownership.

Yanolja Go Global is committed to protecting your privacy. To learn how we handle applicants’ personal data, please review our Privacy Notice for Job Applicants: https://bit.ly/3IVY1wf.