Application Security Engineer II - Secure by Design

Booking.com; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working

Product discounts

Amsterdam living benefits

Job summary

Booking.com is seeking an Application Security Engineer to safeguard our highly scalable travel platform. You will build and operate advanced security tooling, automate remediation, and partner with product teams to embed security across the software development lifecycle.

Your work will cover threat modelling, vulnerability assessments, and integrating SAST/DAST checks, while collaborating with engineers to implement secure-by-design solutions across our global services.

Qualifications

• 3+ years of relevant industry experience in application security.
• Understanding of OWASP Top 10 and secure coding principles.
• Familiarity with HTTP, APIs, authentication, authorization, and TLS.

Responsibilities

• Review applications, APIs, and designs to identify basic security risks.
• Support secure code reviews and vulnerability assessments.
• Help teams remediate common web vulnerabilities and integrate security checks in CI/CD.

Skills

Application security

OWASP Top 10

SAST/DAST tooling

Python/Bash scripting

CI/CD security

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

SAST tools

DAST tools

Threat modelling tools

Job description

Booking.com is seeking an Application Security Engineer to safeguard our highly scalable travel platform. You will build and operate advanced security tooling, automate remediation, and partner with product teams to embed security across the software development lifecycle.

Your work will cover threat modelling, vulnerability assessments, and integrating SAST/DAST checks, while collaborating with engineers to implement secure-by-design solutions across our global services.