Senior Security Engineer

HotelTonight, San Francisco, CA

HotelTonight makes it remarkably easy to book great hotels at amazing rates on your mobile device

HotelTonight makes it remarkably easy to book great hotels at amazing rates, for tonight, tomorrow and beyond. Our goal is to be the premier and most loved way to book a place to stay and we’re looking for a Security Engineer to help do just that.

You'll have broad responsibility within our production engineering group to raise the bar on the security of our apps and infrastructure. You will make code changes to front-end and backend code, develop new subsystems, and apply changes to our cloud infrastructure in order to support the security of our systems and privacy of our users.


  • Immerse yourself in our technology stack and engineering culture – you will work hand-in-glove with production engineers to deliver end-to-end security enhancements
  • Apply security patches to open source libraries or components
  • Write and deploy a code change to a production service


  • Triage and remediate a new security issue submitted to our bug bounty program
  • Harden production systems by making changes to our cloud-based infrastructure configuration using Terraform
  • Work on larger scale improvements to our systems requiring both hands-on coding as well as a holistic architectural understanding


  • Update an AMI using Packer and Ansible, and rotate applicable instancesImplement a new security subsystem from scratch
  • Run a penetration test in partnership with an external security firm
  • Do a risk assessment and help prioritize new items on the security roadmap
  • Understand our security stance end-to-end and provide consultation to stakeholders both inside and outside engineering on how to maintain the security and compliance requirements when building out new systems and processes


  • 3+ years in a hands-on programming roleSolid knowledge of common web and mobile app security issues
  • Basic knowledge of Linux administration fundamentals
  • Basic knowledge of cloud-based infrastructure administration and security fundamentals
  • Ability and desire to work on security issues at any level of the stack, you don’t need to know everything up front but you need the curiosity and drive to dive in and come up with a solution
  • Great communication and collaboration skills
  • Comfort with ambiguity and ability to make decisions with limited information
  • Bonus points for specific tools/skills: Ruby, Ruby on Rails, Node, AWS, Docker, Packer, Terraform, Ansible, Fastly (VCL), Sumologic, Threat Stack, Burp Suite, Metasploit


  • The opportunity to define mobile commerce and change the way people book travel
  • A people-focused organization dedicated to making sure you're challenged, learning, growing, and recognized for all the great work you do
  • The camaraderie of a driven, agile team that is building something disruptive
  • A beautiful workspace at Market & 5th St
  • Excellent health, dental, vision and 401k plans, and stock options too
  • Fun stuff — quarterly hotel credits, unlimited vacation, catered meals, subsidized cell phone plans and fitness memberships, access to our very own hotel-inspired full bar, and the opportunity to spin the HT Roulette wheel to win a spontaneous weekend getaway!
We are on a mission to radically transform hotel bookings. Doing this requires us to think differently and to question conventional approaches, therefore it’s essential to have a diverse team of the very best people with all types of backgrounds and experiences to bring the best ideas to life. We are committed to maintaining an environment where all of our team members have the opportunity to be heard, to make an impact and to do the best work of their lives.

For more information on how we process personal data, please refer to our Recruitment Privacy Notice

About HotelTonight

So we make it remarkably easy to book great hotels at amazing last-minute rates on your mobile device, for tonight, tomorrow and next week. When hotels have unsold rooms, they load them on the app, which means you get incredible deals. We screen every hotel featured, and only work with ones you’ll love. By booking on HotelTonight you get the flexibility to play it by ear, while knowing you’ll get a great price and a great place to stay. 


Want to learn more about HotelTonight? Visit HotelTonight's website.