Candidatul Ideal
- 5+ years of experience in information security
- 5+ years of relevant hands-on experience in security assurance testing and engagement management
- Expertise in at least one of the following areas: (Web) application security, infrastructure security, mobile security
- Excellence in communicating business risk and remediation requirements from assessments
- Excellent stakeholder management skills
- Proficient in scripting languages such as Python, PowerShell, Bash, and Ruby and be able to create scripts that automate security testing processes, enhance efficiency, and uncover vulnerabilities.
- Competent with testing frameworks and tools
- Understanding of OWASP, the MITRE ATT&CK framework and the software development lifecycle (SDLC).
- Analytical and problem-solving mindset.
- Highly organized and efficient
- Experience in offensive tactics
- Software development experience
- One or more of the following certifications: OSCP, OSCE, GPEN, GWAPT, CEH, CISSP or a similar recognized certification in your domain of expertise
Descrierea jobului
The Senior Penetration Tester defines and leads the execution of highly technical and specialized engagements and designs new techniques of testing based on the evolution of industry best practices over time. They are both performing hands-on technical testing without requiring supervision and are coordinating teams of testers to ensure that the engagement objectives are met. They strengthen Booking Holdings brands security posture by proactively identifying vulnerabilities and security control gaps in our systems and applications.
The Senior Penetration Tester provides critical input to the group's brands with the development of the security assurance strategic plan based on subject matter expertise to increase the impact and value added through this area of focus. The Senior Penetration Tester also helps further grow the security assurance area by mentoring other team members and members of other technical non-pentester communities within the Booking Holdings group. The Senior Penetration Tester has strong stakeholder management skills that enable effective communication of technical information to multi-level (up to CISO/CSO level), technical and non-technical audiences within the broader Booking Holdings organization.
This role provides a hybrid way of working with an onsite presence of 2 days/week.
Key Job Responsibilities and Duties
Benefits:
The Senior Penetration Tester provides critical input to the group's brands with the development of the security assurance strategic plan based on subject matter expertise to increase the impact and value added through this area of focus. The Senior Penetration Tester also helps further grow the security assurance area by mentoring other team members and members of other technical non-pentester communities within the Booking Holdings group. The Senior Penetration Tester has strong stakeholder management skills that enable effective communication of technical information to multi-level (up to CISO/CSO level), technical and non-technical audiences within the broader Booking Holdings organization.
This role provides a hybrid way of working with an onsite presence of 2 days/week.
Key Job Responsibilities and Duties
- Plan and organize any externally and internally performed security assurance activities
- Coordinate security assurance engagements executed by external testers
- Execute security assurance engagement testing
- Document and formally report the outcomes of the security assurance activities both to a technical and non-technical audience
- Align with Booking Holdings on the overall security assurance landscape for the Group
- Coordinate and support the contractual relationship and alignment with external security assurance vendors
- Align business testing needs with timely and relevant threat information and verify the organization’s security posture against them
- Perform other duties as assigned
- Research and innovate, regularly research and learn new TTPs, and apply this knowledge to update testing methodology and tools.
- Understand breach and attack simulation solutions, working with them to automate control validation and effectiveness.
- Liaise with security teams to mature prevention, detection, and response capabilities
- Mentor and support junior teammates
Benefits:
- Health insurance
- Prepaid medical subscription (Regina Maria)
- Life insurance
- Meal vouchers
- Learning wallet
- Travel benefit
- Annual vacation leave of 25 business days, pro rata with the working period
- Birthday day off
- Summer break (short Fridays during summer)
- Work from Abroad program (up to 20 days/year in EU)
- Floating days off
- 2 Volunteer days/ year
- Home office one-time bonus
- Bookster
- Linkedin learning platform
- Headspace
- Employee discounts (travel, gym, dental, vision)
Descrierea companiei
Booking Holdings Center of Excellence is part of Booking Holdings, the world's leading provider of online travel and related services, with a rich heritage of digital innovation. The Center provides access to specialized and highly skilled talent, supports projects powered by new and emerging technologies, leverages industry best practices, and fosters collaboration opportunities across all of the Booking Holdings brands, including Booking.com, Priceline, Agoda, KAYAK and OpenTable.
If you are interested to find out more about the Booking Holdings Center of Excellence visit our website: www.bookingholdings-coe.com.
Booking Holdings (NASDAQ: BKNG) is the world’s leading provider of online travel and related services, provided to consumers and local partners in more than 220 countries and territories through five primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK and OpenTable. The mission of Booking Holdings is to make it easier for everyone to experience the world.
Joburi similare
