Booking Holdings Romania is a Center of Excellence based in Bucharest, Romania and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands.
As part of our Booking Holdings Romania team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through five-primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK and OpenTable.
The Security Engineer designs, integrates, and operates data protection services to safeguard Booking.com data across platforms. Success looks like delivering reliable, automated, team‑scoped outcomes with measurable resilience that reduce data exposure and enable privacy/legal workflows through secure integrations and policy enforcement.
This role provides a hybrid way of working with an onsite presence of 2 days/week.
Key Job Responsibilities and Duties
- Integrate and operate Data Loss Prevention services (endpoint, CASB, email) across enterprise and public cloud platforms, in alignment with Data Security policies and control standards, to reduce data exposure and exfiltration risk.
- Expand sensitive data discovery and classification across priority data stores and services, using approved classifiers and scanning templates, to increase visibility and close detection backlogs while reporting coverage and quality metrics.
- Enforce the public‑cloud Data Security Baseline (e.g., encryption in transit/at rest, key management, preventive/detective guardrails) on cloud resources, following reference architectures and IaC standards, to achieve security‑by‑default posture and continuous compliance.
- Apply SRE practices to owned services (define SLOs and alerts, participate in postmortems, automate toil), to improve reliability and time‑to‑recover following incident management and reliability playbooks.
- Integrate and maintain secrets‑detection in developer platforms (e.g., GitLab) and other team collaboration spaces, implementing routing, SLAs, and dashboards, to reduce credential exposure and mean time to remediate using standardized workflows and guidance.
- Collaborate with Security Engineers, Analysts, Developers, and stakeholders to translate Security and Compliance standards into resilient, security‑first designs, and communicate risks, decisions, and trade‑offs clearly to deliver safe‑by‑default services.
Role Qualifications and Requirements
3-5 years of experience in information security
Data Security
Data Protection
Sensitive Data, PII, GDPR, PCI, etc.
Data Loss Prevention (DLP), CASB
Asset Security, Access Management, Cloud Security
Encryption, PKI
Technologies and Tools
Must have
Operating System: Linux
Public Cloud: AWS, Azure, GCP
Programming/Scripting: Bash, Python
Source Control & CI/CD: Gitlab, GitLab CI/CD
Nice to have
- Observability & Monitoring: Prometheus, Grafana, Elastic
- Containerisation: Kubernetes, Docker
- IaC: Terraform
- Configuration Management: Puppet, Ansible
Benefits & Perks
Contributing to a high scale, complex, world renowned product and seeing real-time impact of your work on millions of travelers worldwide
Working in a fast-paced and performance driven culture
Technical, behavioral and interpersonal competence advancement via on-the-job opportunities, experimental projects, hackathons, conferences and active community participation
Competitive compensation and benefits package
Vast amounts of data to validate your ideas and the opportunity to experiment with real users
Booking Holdings is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive.
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.
