Security Engineer

KAYAK; Berlin; Remote; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Flexible work policy

Volunteer time off

Wellness program

Employee resource groups (ERGs)

Zusammenfassung

KAYAK is hiring for a security engineering role based in Berlin. You will support vulnerability management, incident response, and secure development practices across cloud and on‑prem environments.

You will work with engineering, operations, and compliance teams to improve tooling, automation, and threat detection, while continuously learning in a globally distributed team.

Qualifikationen

• Hands-on experience in vulnerability management and incident response.
• Familiarity with security tooling and AI-assisted workflows.
• Strong written and spoken English communication.
• Ability to work autonomously while integrating with a distributed team.

Aufgaben

• Support vulnerability management program, prioritization, and remediation tracking.
• Participate in incident triage, investigation, containment, and post-incident docs.
• Support application security initiatives and code scanning.
• Improve security tooling across endpoint, identity, and cloud security.
• Embed security thinking into development workflows and infra changes.

Kenntnisse

Vulnerability management

Incident response

Security tooling

Automation

Cloud security

IAM

Python scripting

Cybersecurity fundamentals

Security frameworks

Tools

SIEM

EDR

Vulnerability scanners

Jobbeschreibung

• Support and continuously improve the vulnerability management program — defining processes for identifying, prioritizing, tracking, and driving remediation of security findings across infrastructure and applications. This includes working closely with engineering, operations, and IT teams to ensure findings are understood, assigned, and resolved in a timely manner, and reporting on program health and trends to security leadership
• Participate in incident response activities, including triage, investigation, containment, and post-incident documentation
• Support application security initiatives, including automated code scanning, dependency analysis, and working with engineering teams to address security findings early in the development process
• Help configure, monitor, and improve security tooling across areas such as endpoint protection, email security, identity and access management, and cloud security posture
• Contribute to security automation and orchestration workflows that reduce manual effort and improve response times
• Collaborate with engineering, operations, and compliance teams to embed security thinking into development workflows and infrastructure changes
• Document processes, runbooks, and findings to support team knowledge sharing and continuity
• Participate in access reviews and support identity and access management processes in line with established policies
• Stay current with the evolving threat landscape and contribute ideas for improving the team’s detection and response capabilities

Benefits

• Work flexibly: Our global flexible work policy lets our teams decide if they head into one of our offices or work from anywhere else
• Team-wide time off: Most of our team disconnects at the same time each year to recharge and reconnect
• Global volunteer week: Take VTO (Volunteer Time Off) to support the organizations and charitable efforts you believe in
• Wellness: We take care of each other - providing opportunities and spaces to live that work-life balance
• Resource groups: Our five ERGs are employee-led groups for underrepresented communities and their allies
• Career growth: We provide opportunities for our team to develop their skills – or learn new ones – on their own terms

Familiarity with AI tools and how they can be applied in a security context — whether for automating workflows, triaging alerts, or improving detection and response. Experience working with AI models or building AI-assisted workflows is a plusThe ability to communicate clearly in writing and in conversation — our team is globally distributed and works primarily in English (professional working proficiency is sufficient; native fluency is not required)A collaborative approach to problem-solving — you ask questions, share what you learn, and support your teammatesComfort working with some degree of autonomy on assigned tasks and projects, while knowing when to ask for inputHands-on experience in at least one security domain, such as vulnerability management, incident response, application security, endpoint security, or identity and access managementExperience working with security tooling (e.g., vulnerability scanners, endpoint detection and response platforms, SIEM systems, or similar); familiarity with specific tools is a plus, but willingness to learn our stack matters more than exact tool experienceA solid understanding of cybersecurity fundamentals — including networking, operating systems (Linux, macOS, or Windows), and cloud environments — gained through any combination of formal education, self-study, bootcamps, or professional experienceFamiliarity with the NIST Cybersecurity Framework or similar security frameworksExperience with cloud environments (AWS or GCP) or container securityExposure to security automation or scripting (e.g., Python, workflow automation tools)Experience working in a regulated environment (e.g., SOC 2, PCI)