{"id":2012229,"url":"https://alion.io/job/booking-security-engineer","title":"Security Engineer","company":{"id":97173,"name":"Booking.com","domain":"booking.com","url":"https://alion.io/company/booking-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":124000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false}],"status":"closed","first_seen_at":"2026-09-24T00:06:31Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-08T02:42:37Z","board_verified":false,"closed_at":"2026-10-08T02:42:37Z","days_open":14,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":14},"description":"Join Booking.com as an Application Security Engineer, where you will play a crucial role in safeguarding the security and privacy of our customers. You will build and operate advanced security tooling, automate remediation, analyze security indicators, and partner with product teams to embed security throughout the software development lifecycle. Your expertise will directly contribute to the detection, prevention, and response to application security threats across our global platform.\nMissions\nIdentifying and explaining common application security risks, providing practical remediation guidance to development teams.\nBuilding and operating advanced security tooling, automating remediation, and analyzing security indicators to enhance application security.\nCollaborating with software engineers, platform teams, and security colleagues to embed security throughout the software development lifecycle.\nProfil recherché\n - Some experience with application security tools, such as SAST, DAST, software composition analysis, vulnerability scanners, or secrets-scanning tools- Bachelor’s or Master’s degree in Computer Science or a related field\n- 3+ years of relevant industry experience\n- Familiarity with common risks such as injection, broken access control, authentication failures, security misconfiguration, cross-site scripting, and insecure dependencies\n- Ability to work effectively with developers and other technical teams\n- Ability to communicate security findings clearly and constructively\n- Basic to intermediate knowledge of application and web security\n- Familiarity with HTTP, APIs, authentication, authorization, and TLS\n- Analytical mindset, attention to detail, and willingness to learn\n- Basic scripting or automation skills in Python, Bash, or a similar language\n- Basic understanding of how LLM applications work, including prompts, model inputs and outputs, retrieval-augmented generation, and tool or API integrations\n- Understanding of the OWASP Top 10 and basic secure coding principles\n- Ability to read and understand code in at least one programming language\n- Basic understanding of how to secure LLM applications through input and output validation, data minimisation, access control, least privilege, rate limiting, logging, and human approval for high-impact actions\n- Experience with cloud platforms, containers, or infrastructure as code\n- Familiarity with API security or microservices\n- Experience with threat modelling or security testing\n- Experience or interest in securing AI or LLM-enabled applications\n- Familiarity with vulnerability management or incident response\n- Knowledge of privacy or security requirements relevant to software development\n- Security certifications or relevant practical projects","description_format":"text","description_chars":2755,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-07T13:05:12Z"},{"event":"close","at":"2026-10-08T02:42:37Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/booking-security-engineer","json_url":"https://alion.io/job/booking-security-engineer.json","meta":{"generated_at":"2026-10-11T21:28:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10362,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":97173},"rest":"https://alion.io/mcp/rest/get_company?id=97173"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbooking-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbooking-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbooking-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/booking-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbooking-security-engineer"}]}