Senior Account Security Analyst I

Booking.com B.V. (the company behind Booking.com™, the market-leading online hotel reservation service in the world) is looking for a Senior Account Security Analyst

The goal of Account Security is to proactively protect, prevent, detect, and respond to Account Takeovers and the creation of Fake (malicious) Accounts. The team is responsible for managing account security threats across global business operations, with continuous improvement of detection and response capabilities as a core focus. Account Security is part of the Cyber Security department within Technology, with Analyst teams based in the Netherlands, Romania, and India.

As a Senior Account Security Analyst, you will lead large-scale and in-depth analysis of existing incidents, pushing forward the boundaries of incident response, detection, and prevention through evidence-based, innovative recommendations developed in close collaboration with Product & Engineering teams. You will train, coach, and mentor Junior and Core analysts, contribute to Portfolio (and where relevant, Security-wide) objectives and projects, and act as a subject matter expert with the broadest technical and topic-specific knowledge on the team. You may also serve as the main point of contact for external stakeholders.

B.responsible

• Own and, where relevant, lead quarterly/yearly objectives and projects, data research, and large-scale topic analysis, in alignment with Capability policy, to ensure compliance with Security department and external regulatory obligations.
• Identify improvement and development opportunities for Account Security incident response, detection, prevention, processes, and tooling to raise overall capability efficiency.
• Own the Incident Forensics & Analytics topic by consistently reviewing analysts' post-incident retrospectives and analytics, and encourage analysts to work with Product and Engineering teams to represent new attack schemes and scenarios.
• Contribute to or lead projects that reduce Account Takeover-related losses while maintaining a positive customer experience, including liaising with third-party vendors.
• Create statistical metrics highlighting the problems with potential solutions to improve customer experience.
• Provide support and/or approval for new procedures proposed by Tier 1 and Tier 2 analysts, and take ownership of particularly complex cases.
• Perform proactive, in-depth investigations by querying relevant data (Snowflake/Python/SIEM) and using available tooling.
• Develop, initiate, maintain, and revise automated strategies and approaches for Booking.com's Security and Cyber Operations within the broader organizational context.
• Keep internal documentation and procedures up to date, and develop new ways to uphold high standards of operations team performance.
• Monitor existing systems and metrics to identify efficiency issues and detect more advanced, complex incidents, escalating these to the CoE team under ASAF guidance and supervision for Incident Response.
• Maintain a strong understanding of the Account Security threat landscape to continually improve detection and prevention methods.
• Represent the team with external stakeholders and act as the go-to Subject Matter Expert when consulted.

B.skilled

• Advanced Tableau or similar skills.
• Advanced SQL skills.
• Advanced SIEM skills.
• Advanced Data Analysis skills, including the ability to manipulate and format large data sets and train/coach others to do the same.
• Advanced Python skills are highly desirable.
• Strong knowledge of Account Takeover, Credential Stuffing, Authentication, Fake Accounts, and Phishing.
• Advanced product, controls, and domain knowledge in Cyber Security.
• Strong stakeholder management skills.
• Up-to-date domain knowledge of recent Cyber Threat scenarios.
• Bachelor's or Master's degree (preferably in Information Technology or Information Security), or equivalent relevant job experience, or relevant certifications.
• 5-8 years of relevant job experience (Advanced Job Knowledge).
• Great communication and problem-solving skills.
• Experience collaborating with Product/Engineering teams is a plus.
• Experience with Incident Forensics is a plus.
• Crisis management experience is a plus.
• Ability to work under pressure and adapt quickly to changing environments.
• Experience presenting to and consulting with customers/partners is a strong asset.

Benefits & Perks - Global Impact, Personal Relevance: Booking.com’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well unique-to-Booking.com benefits which include:Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leaveHybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and Booking.com wallet credit Diversity, Equity and Inclusion (DEI) at Booking.com: Diversity, Equity & Inclusion have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations. Take it from our Chief People Officer, Paulo Pisano: “At Booking.com, the diversity of our people doesn’t just build an outstanding workplace, it also creates a better and more inclusive travel experience for everyone. Inclusion is at the heart of everything we do. It’s a place where you can make your mark and have a real impact in travel and tech.” We ensure that colleagues with disabilities are provided the adjustments and tools they need to participate in the job application and interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Application Process: Let’s go places together: How we Hire This role does not come with relocation assistance. Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive. Pre-Employment ScreeningIf your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.