AppSec Engineer - WAF & Incident Response

Booking Holdings, Inc.; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work options

Product discounts

Travel perks

Job summary

Booking.com is seeking a Security Engineer specialized in application security to protect customer-facing applications and APIs. You will operate WAF protections, improve detection, and provide hands-on support during security incidents across Booking.com’s global platform.

The role involves working with CI/CD pipelines, infrastructure as code, and security telemetry to detect threats, with collaboration across security engineering, product, and operations teams.

Qualifications

• 3–5 years in security engineering, app security, cloud security, or related hands-on role.
• Practical experience designing, operating or tuning WAF controls, AWS WAF preferred.
• Experience managing security configuration through code and delivery pipelines (IaC).
• Ability to investigate web/API activity using SIEM or log analytics and craft queries.

Responsibilities

• Build and maintain application protections via WAF policies, CDK and CI/CD.
• Tune edge controls to reduce exposure while managing false positives.
• Increase detection and visibility using WAF, SIEM and telemetry.
• Provide third-line escalation for app security incidents and coordinate containment.

Skills

Web security

WAF experience

SIEM analysis

Cloud security

Scripting Python

Education

Bachelor's degree or equivalent

Tools

AWS WAF

CDK

CI/CD

SIEM

Python

TypeScript

Job description

Booking.com is seeking a Security Engineer specialized in application security to protect customer-facing applications and APIs. You will operate WAF protections, improve detection, and provide hands-on support during security incidents across Booking.com’s global platform.

The role involves working with CI/CD pipelines, infrastructure as code, and security telemetry to detect threats, with collaboration across security engineering, product, and operations teams.