• As a Senior Account Security Analyst, you will lead large-scale and in-depth analysis of existing incidents, pushing forward the boundaries of incident response, detection, and prevention through evidence-based, innovative recommendations developed in close collaboration with Product & Engineering teams
• You will train, coach, and mentor Junior and Core analysts, contribute to Portfolio (and where relevant, Security-wide) objectives and projects, and act as a subject matter expert with the broadest technical and topic-specific knowledge on the team
• You may also serve as the main point of contact for external stakeholders
• Own and, where relevant, lead quarterly/yearly objectives and projects, data research, and large-scale topic analysis, in alignment with Capability policy, to ensure compliance with Security department and external regulatory obligations
• Identify improvement and development opportunities for Account Security incident response, detection, prevention, processes, and tooling to raise overall capability efficiency
• Own the Incident Forensics & Analytics topic by consistently reviewing analysts’ post-incident retrospectives and analytics, and encourage analysts to work with Product and Engineering teams to represent new attack schemes and scenarios
• Contribute to or lead projects that reduce Account Takeover-related losses while maintaining a positive customer experience, including liaising with third-party vendors
• Create statistical metrics highlighting the problems with potential solutions to improve customer experience
• Provide support and/or approval for new procedures proposed by Tier 1 and Tier 2 analysts, and take ownership of particularly complex cases
• Perform proactive, in-depth investigations by querying relevant data (Snowflake/Python/SIEM) and using available tooling
• Develop, initiate, maintain, and revise automated strategies and approaches for Booking.com’s Security and Cyber Operations within the broader organizational context
• Keep internal documentation and procedures up to date, and develop new ways to uphold high standards of operations team performance
• Monitor existing systems and metrics to identify efficiency issues and detect more advanced, complex incidents, escalating these to the CoE team under ASAF guidance and supervision for Incident Response
• Maintain a strong understanding of the Account Security threat landscape to continually improve detection and prevention methods
• Represent the team with external stakeholders and act as the go-to Subject Matter Expert when consulted

Benefits

• Health insurance
• Free access to Headspace for you and your loved ones
• Global Employee Assistance Program
• Meditation and Breastfeeding rooms at the office
• Booking Cares - 2 days per year to volunteer and learn
• Life insurance
• Disability insurance
• Pension plan
• Annual paid time off
• Parental leave - 22 weeks
• Grandparent leave - 10 days
• Care leave - 10 days
• Bereavement leave - up to 4 weeks
• Anniversary leave
• Working from Home Furniture and Ergonomic Support
• Working from Abroad - up to 20 days per year
• Discounts & Wallet credits to spend on our products
• Upgrade to Booking.com Genius Level 3
• Friends & Family Booking.com discount vouchers
• Free access to online learning platforms
• Development and mentorship programs to support career growth
• Access to trainings and workshops
• Team development opportunities
• Local discount programs
• Game rooms in offices
• On-site meals, coffee and snacks including vegan options

• Advanced Python skills are highly desirable
• Advanced Tableau or similar skills
• 5-8 years of relevant job experience (Advanced Job Knowledge)
• Experience with Incident Forensics is a plus
• Great communication and problem-solving skills
• Experience collaborating with Product/Engineering teams is a plus
• Bachelor’s or Master’s degree (preferably in Information Technology or Information Security), or equivalent relevant job experience, or relevant certifications
• Crisis management experience is a plus
• Strong stakeholder management skills
• Up-to-date domain knowledge of recent Cyber Threat scenarios
• Advanced SQL skills
• Experience presenting to and consulting with customers/partners is a strong asset
• Strong knowledge of Account Takeover, Credential Stuffing, Authentication, Fake Accounts, and Phishing
• Advanced product, controls, and domain knowledge in Cyber Security
• Ability to work under pressure and adapt quickly to changing environments
• Advanced Data Analysis skills, including the ability to manipulate and format large data sets and train/coach others to do the same
• Advanced SIEM skills