AppSec Security Specialist

About Us

At Checkfront , we’re builders, doers, and difference-makers, driven by a shared mission to reshape the tours, activities, and experiences industry. Alongside our sister brands, Rezdy and Regiondo, we power more than 20,000 businesses and support over $10B in bookings globally. Our technology helps operators thrive while delivering unforgettable moments to travelers around the world.

We work in an industry built on adventure, energy, and human connection, and that same spirit fuels how we show up every day. Spanning North America, Europe, and APAC, our teams are united by bold goals, a bias for action, and an unwavering commitment to delivering for our customers.

But our success starts with people. Our teams are the engine behind everything we create. We value self-starters who take ownership, embrace challenges, and raise the bar for themselves and those around them. We believe in creating space to grow, take risks, and make a real impact, and we celebrate those who lead with curiosity, grit, and drive.

If you’re passionate about security, compliance, and helping teams work smarter and safer, this is your kind of place. Let’s build, grow, and win together.
About the Role

We are seeking an AppSec Security Specialist to support our growing security function, with a primary focus on application security, vulnerability management, and secure development practices across Checkfront and our sister brands.

This is a hybrid security role that combines hands-on application security work with security operations support. You will help identify and remediate risks across our web applications, APIs, cloud environments, and development workflows, while also supporting key security tools across endpoint protection, DLP, SIEM, SOAR, vulnerability management, and security awareness.

This role is ideal for someone who enjoys working with engineering teams, performing web application security scans, coordinating penetration testing activities, investigating security alerts, tracking remediation, and helping the business improve its overall security posture.
What You Will Do
Application Security

- Support application security across Checkfront , Rezdy, Regiondo, and related platforms.

- Perform web application security scans and help validate, prioritize, and track findings through remediation.

- Support vulnerability management processes, including scanning, prioritization, reporting, and remediation tracking.

- Use and support application security tools such as SAST, DAST, SCA, and manage security findings.

- Coordinate with penetration testing vendors, including scoping, scheduling, evidence collection, findings review, and remediation follow-up.

- Work with engineering/dev teams to validate security findings, reduce risk, and improve secure development practices.

- Help identify and reduce risk across web applications, APIs, cloud services, and third-party components.

- Support secure software development practices, including clear guidance on remediation, secure coding, and risk reduction.

Security Operations

- Support day-to-day security operations across endpoint protection, DLP, SIEM, SOAR, and vulnerability management tools.

- Monitor and triage security alerts from tools such as CrowdStrike and related security platforms.

- Assist with incident response activities, including investigation, documentation, escalation, and follow-up actions.

- Help tune alerts, workflows, automations, and reporting to reduce noise and improve security visibility.

- Support security logging, monitoring, and detection improvement initiatives.

Security Awareness and Training

- Manage and support the KnowBe4 security awareness platform.

- Coordinate phishing simulations, training campaigns, reporting, and follow-up actions.

- Help improve employee security awareness through clear communication, practical guidance, and targeted training.

- Track training completion and support reporting related to security education.