We’ve signed up to an ambitious journey. Join us!

As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better, together.

The Role

We’re seeking a skilled Security Engineer to strengthen our core product applications through advanced security design, code review, testing, and implementation. In this role, you’ll assess current security measures, build custom tools for enhanced controls, and collaborate with product teams to elevate their security expertise. 

Key responsibilities include conducting system tests, supporting compliance, and responding quickly to security incidents. You’ll bring strong experience in application security, risk assessment, and cloud infrastructure, along with excellent communication skills to help teams adopt best security practices. If you’re passionate about building resilient, secure products, we want to hear from you!

Job Responsibilities:

• Maintaining a thorough understanding of product and infrastructure security throughout the Product and Technology ecosystem and enabling product teams in secure development and operations of their applications

• Planning, researching, and designing, and developing secure application security capabilities and CI/CD pipelines.

• Developing, reviewing, and collaborating on the configuration of cloud account configuration, network isolation, security groups, access policies, network policies, VPNs, and overall compute platform security, including both host-based and container-based workloads.

• Integrating identity management systems, digital certificates, and secrets management with application workloads.

• Reviewing vulnerabilities with teams and suggesting strategies and tactics for remediation.

• Validating security implementations and participating in remediation and risk acceptance efforts.

• Working with platform and product teams to implement disaster recovery procedures and conducting security breach drills.

• Responding quickly and effectively to all security incidents and providing post-event analyses.

• Guiding the overall security community, cultivating a sense of security awareness, and arranging for continuous education.

• Maintaining and contributing to a growing threat modeling program, and assisting teams continuous improvement in this area.

• Remaining up to date with the latest trends, standards, and products.

About you:

• A bachelor's or associate's degree in IT, computer science, or equal experience. Advanced education or training in cloud/application security is preferred.

• Experience in application development and security.

• Experience with AWS, including EKS, multi-account setups, GuardDuty, KMS, Config, SSM, CloudFront, Firewall Manager, Shield, Network Firewall, WAF, IAM, CloudTrail, Security Hub, Secrets Manager, Inspector, Global Accelerator, ELB, EC2, Athena

• A strong working knowledge of current application and infrastructure risks, secure application design, and operating systems including experience with various Linux distributions and mobile operating systems (Android and iOS).

• Experience developing solutions with Terraform, Terragrunt, and/or Crossplane.

• Experience implementing DevSecOps pipeline tools such as static application security testing (code scanning, dependency scanning, secret scanning) dynamic application security testing, interactive application security testing, container vulnerability scanning, and infrastructure vulnerability scanning

• Excellent teaching, problem-solving, communication, and interpersonal skills.

• Knowledge of multiple languages including but not limited to Java, Kotlin, JavaScript, NodeJS, Go, C-Sharp, Swift, Python, bash, and SQL

What We Offer

• Flexible ways of working: combine working from home with working from the office, whatever is agreed on within your team.

• Digital global onboarding: three days to indulge in learning & connecting with fellow new starters across the globe.

• Pension, insurances & health reimbursement: A competitive pension, in combination with the basic package of insurances

• Proactive health support: your wellbeing is important to us, which is why we offer proactive medical support, all depending on your need.

About us

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide. Arrive delivers a unique combination of the core ingredients to make cities more livable: from smart payments and optimized car parks to data-driven traffic reduction and support for reinvestment in public transport and green space. It’s about more than function, it’s about saving time and simplifying the experience of travel for everyone. Travel is more than a journey, it’s how you Arrive.