Senior Account Security Analyst

Booking.com; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Headspace access

Pension plan

Annual leave

Job summary

Booking.com in Amsterdam is seeking a Senior Account Security Analyst to lead large-scale incident analyses, drive detection and prevention improvements, and collaborate with Product & Engineering teams. You will train junior analysts, own incident forensics and analytics, and coordinate with external stakeholders to deliver evidence-based recommendations while upholding top security standards.

Advanced Python and SQL skills, strong communication, and experience with security operations will

Qualifications

• Advanced Python skills are highly desirable.
• Advanced Tableau or similar skills.
• 5-8 years of relevant job experience (Advanced Job Knowledge).
• Experience with Incident Forensics is a plus.
• Great communication and problem-solving skills.
• Experience collaborating with Product/Engineering teams is a plus.
• Bachelor’s or Master’s degree (preferably in Information Technology or Information Security), or equivalent relevant job experience, or relevant certifications.
• Crisis management experience is a plus.
• Strong stakeholder management skills.
• Up-to-date domain knowledge of recent Cyber Threat scenarios.
• Advanced SQL skills.
• Experience presenting to and consulting with customers/partners is a strong asset.
• Strong knowledge of Account Takeover, Credential Stuffing, Authentication, Fake Accounts, and Phishing.
• Advanced product, controls, and domain knowledge in Cyber Security.
• Ability to work under pressure and adapt quickly to changing environments.
• Advanced Data Analysis skills, including the ability to manipulate and format large data sets and train/coach others to do the same.
• Advanced SIEM skills.

Responsibilities

• Lead large-scale incident analysis and drive detection and prevention improvements.
• Mentor junior and core analysts and contribute to security objectives.
• Serve as main contact for external stakeholders when needed.
• Own and lead quarterly/yearly objectives and projects, data research, and large-scale topics.
• Identify opportunities to improve incident response, detection, and tooling.
• Own the Incident Forensics & Analytics topic and liaise with Product/Engineering to address new attack schemes.
• Lead projects reducing Account Takeover-related losses while preserving customer experience.
• Create statistical metrics and actionable insights to improve customer experience.
• Provide support for new procedures proposed by Tier 1/2 analysts and handle complex cases.
• Conduct proactive investigations using data (Snowflake/Python/SIEM) and tooling.

Skills

Python

Tableau

Incident Forensics

SQL

SIEM

Data Analysis

Stakeholder Management

Training/Mentoring

Education

Bachelor’s or Master’s degree in IT or Information Security

Tools

Snowflake

Job description

• As a Senior Account Security Analyst, you will lead large-scale and in-depth analysis of existing incidents, pushing forward the boundaries of incident response, detection, and prevention through evidence-based, innovative recommendations developed in close collaboration with Product & Engineering teams
• You will train, coach, and mentor Junior and Core analysts, contribute to Portfolio (and where relevant, Security-wide) objectives and projects, and act as a subject matter expert with the broadest technical and topic-specific knowledge on the team
• You may also serve as the main point of contact for external stakeholders
• Own and, where relevant, lead quarterly/yearly objectives and projects, data research, and large-scale topic analysis, in alignment with Capability policy, to ensure compliance with Security department and external regulatory obligations
• Identify improvement and development opportunities for Account Security incident response, detection, prevention, processes, and tooling to raise overall capability efficiency
• Own the Incident Forensics & Analytics topic by consistently reviewing analysts’ post-incident retrospectives and analytics, and encourage analysts to work with Product and Engineering teams to represent new attack schemes and scenarios
• Contribute to or lead projects that reduce Account Takeover-related losses while maintaining a positive customer experience, including liaising with third-party vendors
• Create statistical metrics highlighting the problems with potential solutions to improve customer experience
• Provide support and/or approval for new procedures proposed by Tier 1 and Tier 2 analysts, and take ownership of particularly complex cases
• Perform proactive, in-depth investigations by querying relevant data (Snowflake/Python/SIEM) and using available tooling
• Develop, initiate, maintain, and revise automated strategies and approaches for Booking.com’s Security and Cyber Operations within the broader organizational context
• Keep internal documentation and procedures up to date, and develop new ways to uphold high standards of operations team performance
• Monitor existing systems and metrics to identify efficiency issues and detect more advanced, complex incidents, escalating these to the CoE team under ASAF guidance and supervision for Incident Response
• Maintain a strong understanding of the Account Security threat landscape to continually improve detection and prevention methods
• Represent the team with external stakeholders and act as the go-to Subject Matter Expert when consulted

Benefits

• Health insurance
• Free access to Headspace for you and your loved ones
• Global Employee Assistance Program
• Meditation and Breastfeeding rooms at the office
• Booking Cares - 2 days per year to volunteer and learn
• Life insurance
• Disability insurance
• Pension plan
• Annual paid time off
• Parental leave - 22 weeks
• Grandparent leave - 10 days
• Care leave - 10 days
• Bereavement leave - up to 4 weeks
• Anniversary leave
• Working from Home Furniture and Ergonomic Support
• Working from Abroad - up to 20 days per year
• Discounts & Wallet credits to spend on our products
• Upgrade to Booking.com Genius Level 3
• Friends & Family Booking.com discount vouchers
• Free access to online learning platforms
• Development and mentorship programs to support career growth
• Access to trainings and workshops
• Team development opportunities
• Local discount programs
• Game rooms in offices
• On-site meals, coffee and snacks including vegan options

Advanced Python skills are highly desirableAdvanced Tableau or similar skills5-8 years of relevant job experience (Advanced Job Knowledge)Experience with Incident Forensics is a plusGreat communication and problem-solving skillsExperience collaborating with Product/Engineering teams is a plusBachelor’s or Master’s degree (preferably in Information Technology or Information Security), or equivalent relevant job experience, or relevant certificationsCrisis management experience is a plusStrong stakeholder management skillsUp-to-date domain knowledge of recent Cyber Threat scenariosAdvanced SQL skillsExperience presenting to and consulting with customers/partners is a strong assetStrong knowledge of Account Takeover, Credential Stuffing, Authentication, Fake Accounts, and PhishingAdvanced product, controls, and domain knowledge in Cyber SecurityAbility to work under pressure and adapt quickly to changing environmentsAdvanced Data Analysis skills, including the ability to manipulate and format large data sets and train/coach others to do the sameAdvanced SIEM skills