Booking Holdings Romania - Threat Exposure Senior Security Engineer - Pipeline
Booking Holdings1 day ago
Bucharest, RomaniaSenior
Responsibilities
- Design, build, and maintain exposure detection logic, threat-hunting queries, and TEM pipeline automations.
- Design and evolve technical architecture for threat intelligence, asset and software inventory, orchestration, and case management.
- Integrate and normalize commercial, open-source, and internal threat intelligence and correlate indicators with brand assets and inventories.
- Maintain exposure data models covering affected components and versions, exposure windows, evidence coverage, and confidence.
- Build automated workflows to route exposures, track SLAs and escalations, and maintain auditable records through verified closure.
- Develop dashboards and reporting for TEM KPIs, including exposure-answer time, evidence coverage, indeterminate rate, and verified remediation.
- Apply version control, automated testing, code review, controlled deployment, documentation, and runbook practices.
- Research emerging threats, attacker tactics, automation methods, and safe AI-assisted workflows.
Requirements
- 5+ years of experience in information security, security engineering, or a related software or infrastructure engineering role.
- Hands-on experience with asset and component matching, affected-version analysis, evidence freshness, detections, threat hunting, or security data pipelines.
- Proficiency in Python or a comparable language, REST APIs, JSON, and webhooks.
- Experience with security orchestration and automation platforms, including low-code, no-code, native, or cloud platforms.
- Working knowledge of threat intelligence and vulnerability-prioritization concepts and standards, including indicators, TTPs, STIX/TAXII, CVE, CVSS, EPSS, CISA KEV, and MITRE ATT&CK.
- Experience applying AI/LLM capabilities safely in security workflows, including output validation and prompt-injection awareness.
- Working knowledge of cloud security, preferably AWS, asset inventory, software supply chain concepts, package ecosystems, SBOM, and CI/CD.
- Experience with version control, infrastructure as code, CI/CD practices, dashboards, and security metrics.
- Ability to communicate technical risk to technical and non-technical audiences, with strong analytical, problem-solving, organizational, and efficiency skills.
- Desirable experience includes CAASM, threat intelligence platforms, offensive security, vulnerability management, or incident response.
- Desirable certifications include GCTI, GCIH, GCDA, AWS Certified Security – Specialty, OSCP, CISSP, or a similar recognized certification.
Benefits
- Hybrid work arrangement with an onsite presence of two days per week.
- Competitive compensation and benefits package.
- Opportunities for technical, behavioral, and interpersonal development through on-the-job projects, experimental projects, hackathons, conferences, and community participation.
- Opportunity to work on a high-scale product with real-time impact for millions of travelers and access to extensive data for experimentation.
About Booking Holdings
Booking Holdings is a public company (NASDAQ: BKNG) headquartered in Norwalk, CT that operates a portfolio of online travel and dining brands, including Booking.com, Priceline, Agoda, KAYAK, and OpenTable. It connects travelers and diners with accommodations, transportation, activities, and restaurants, while providing distribution, advertising, and payments/fintech services to travel and hospitality partners. The platforms support bookings in more than 220 countries and territories.