Enterprise Security Architect: Enable Secure Delivery

Booking.com; Netherlands; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work

Work from abroad

Product discounts

Amsterdam living

Real-world impact

Competitive package

Job summary

Booking.com is seeking a Senior Security Architect to lead the security architecture domain within Tech Standards and enable secure engineering across the engineering lifecycle.

You will translate guiding principles into practical security patterns, shape non-functional requirements, and influence senior technical communities to adopt secure practices in real delivery work. Amsterdam-based with hybrid work, global impact.

Qualifications

• Experience in enterprise-scale security architecture and related domains.
• Ability to translate security requirements into practical architecture guidance and reference patterns.
• Strong grasp of zero-trust principles and pragmatic application in complex environments.

Responsibilities

• Own the security architecture domain within Tech Standards and align with enterprise direction.
• Translate guiding principles into practical security architecture guidance, patterns, and defaults.
• Shape security non-functional requirements in collaboration with Security teams.
• Turn security findings into architecture guidance for delivery teams.
• Partner with BU architects, engineering leaders, Security, and SRE to ensure relevant guidance.
• Provide a strategic enterprise view across identity, data protection, network and cloud security.
• Champion shift-left security in SDLC and product delivery cycles.

Skills

Security architecture

Zero-trust

Identity & access management

Data protection & cloud security

SDLC security integration

Regulatory compliance & risk mgmt

Influence without authority

Education

CISSP-ISSAP

CISM

CCZT

GDSA

Job description

Booking.com is seeking a Senior Security Architect to lead the security architecture domain within Tech Standards and enable secure engineering across the engineering lifecycle.

You will translate guiding principles into practical security patterns, shape non-functional requirements, and influence senior technical communities to adopt secure practices in real delivery work. Amsterdam-based with hybrid work, global impact.