Security Engineer

Role Qualifications and Requirements

3-5 years of experience in information security
Data Security
Data Protection
Sensitive Data, PII, GDPR, PCI, etc.
Data Loss Prevention (DLP), CASB
Asset Security, Access Management, Cloud Security
Encryption, PKI

Technologies and Tools

Must have
Operating System: Linux
Public Cloud: AWS, Azure, GCP
Programming/Scripting: Bash, Python
Source Control & CI/CD: Gitlab, GitLab CI/CD

Nice to have
Observability & Monitoring: Prometheus, Grafana, Elastic
Containerisation: Kubernetes, Docker
IaC: Terraform
Configuration Management: Puppet, Ansible

The Security Engineer designs, integrates, and operates data protection services to safeguard Booking.com data across platforms. Success looks like delivering reliable, automated, team‑scoped outcomes with measurable resilience that reduce data exposure and enable privacy/legal workflows through secure integrations and policy enforcement.


This role provides a hybrid way of working with an onsite presence of 2 days/week.


Key Job Responsibilities and Duties

Integrate and operate Data Loss Prevention services (endpoint, CASB, email) across enterprise and public cloud platforms, in alignment with Data Security policies and control standards, to reduce data exposure and exfiltration risk.
Expand sensitive data discovery and classification across priority data stores and services, using approved classifiers and scanning templates, to increase visibility and close detection backlogs while reporting coverage and quality metrics.
Enforce the public‑cloud Data Security Baseline (e.g., encryption in transit/at rest, key management, preventive/detective guardrails) on cloud resources, following reference architectures and IaC standards, to achieve security‑by‑default posture and continuous compliance.
Apply SRE practices to owned services (define SLOs and alerts, participate in postmortems, automate toil), to improve reliability and time‑to‑recover following incident management and reliability playbooks.
Integrate and maintain secrets‑detection in developer platforms (e.g., GitLab) and other team collaboration spaces, implementing routing, SLAs, and dashboards, to reduce credential exposure and mean time to remediate using standardized workflows and guidance.
Collaborate with Security Engineers, Analysts, Developers, and stakeholders to translate Security and Compliance standards into resilient, security‑first designs, and communicate risks, decisions, and trade‑offs clearly to deliver safe‑by‑default services.