Job Description

:
We believe that the passion and talent of our employees is our strength - it is what drives us towards outstanding performance. We offer a dynamic, motivating and sophisticated work environment. A culture that is open, innovative and performance-oriented. Our scale and scope, commitment to people and high standards of integrity make Booking.com a great place to work.
Booking.com's Enterprise Security organisation is seeking a passionate engineer who wants to protect the world's largest travel platform against attacks on its production platform. Your skills will be the foundation of security initiatives that protect the security and privacy of all our customers, partners, and employees.
The Enterprise Security organisation makes security effortless for our different production platforms. As part of this team, you will be performing security engineering, building advanced and novel detective and preventive controls, developing systems to automate remediation and advise product and infrastructure teams on how to keep our data safe.
B.Responsible
Design, implement, and maintain cloud security architecture for Google Cloud Platform
(GCP) environment
Configure and support security monitoring tools and security teams for threat detection and incident response
Work closely with other security and platform teams to ensure cloud security measures meet regulatory requirements and contractual obligations (e.g. NIST, PCI DSS, GDPR, SOX)
Support and respond to security incidents in cloud environments
Optimise cloud security controls to balance security requirements with business needs and other requirements
Support cloud security related assessments like pentests, audits and provide necessary documentation and evidence
Conduct security reviews of cloud-based applications and services
Participate in cloud architecture design discussions to ensure security is considered from the outset
Participate in risk assessments and develop risk mitigation strategies for cloud deployments
Provide security guidance and training to other teams within the organisation
Communicate security concepts and risks to both technical and non-technical stakeholders
Challenge ideas and methods while working together with talented, highly skilled team members;
Help team members to improve their skills by providing technical guidance;
Maintain and develop knowledge of cyber security trends;
B.Skilled
Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
3-5 years of professional experience in the Cloud Security domain.
Cloud Platforms: Experience with Google Cloud Platform (GCP) and its security features. Knowledge of other public cloud platforms (e.g., AWS, Azure) is a strong advantage.
Infrastructure as Code (IaC): Hands-on experience with IaC tools such as Terraform or Google Cloud Deployment Manager ( Infra Manager ).
Cyber Security Expertise: Extensive knowledge of security engineering and cloud security principles.
CSPM: Experience with a Cloud Security Posture Management (CSPM) / CNAPP tool, specifically Wiz.
DevSecOps: Understanding of DevSecOps practices and security automation in CI/CD pipelines
Scripting/Coding: Proficiency in coding and/or scripting using languages such as Bash, Golang, Python, Perl, or similar.
Communication: Excellent written and verbal communication skills for effective stakeholder management.
Security Assessments:Ability to perform security assessments and develop mitigation strategies for cloud deployments risks
Compliance: Familiarity with major compliance frameworks and regulations (e.g., SOX, PCI DSS, GDPR).
Nice to have
Certifications: Professional-level cloud security certifications, such as the Google Cloud Certified Professional Cloud Security Engineer.
Linux security and Network Security knowledge ( firewalls, vpn ).
Agile methodology knowledge and understanding.
Knowledge of containerization technologies (e.g., Docker, Kubernetes) and associated security measures
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Skills Required