Senior Account Security Analyst I

Booking.com B.V. (the company behind Booking.com™, the market-leading online hotel reservation service in the world) is looking for a Senior Account Security Analyst.

The goal of Account Security is to proactively protect, prevent, detect, and respond to Account Takeovers and the creation of Fake (malicious) Accounts. The team is responsible for managing account security threats across global business operations, with continuous improvement of detection and response capabilities as a core focus. Account Security is part of the Cyber Security department within Technology, with Analyst teams based in the Netherlands, Romania, and India.

As a Senior Account Security Analyst, you will lead large-scale and in-depth analysis of existing incidents, pushing forward the boundaries of incident response, detection, and prevention through evidence-based, innovative recommendations developed in close collaboration with Product & Engineering teams. You will train, coach, and mentor Junior and Core analysts, contribute to Portfolio (and where relevant, Security-wide) objectives and projects, and act as a subject matter expert with the broadest technical and topic-specific knowledge on the team. You may also serve as the main point of contact for external stakeholders.

• Own and, where relevant, lead quarterly/yearly objectives and projects, data research, and large-scale topic analysis, in alignment with Capability policy, to ensure compliance with Security department and external regulatory obligations.

• Identify improvement and development opportunities for Account Security incident response, detection, prevention, processes, and tooling to raise overall capability efficiency.

• Own the Incident Forensics & Analytics topic by consistently reviewing analysts' post-incident retrospectives and analytics, and encourage analysts to work with Product and Engineering teams to represent new attack schemes and scenarios.

• Contribute to or lead projects that reduce Account Takeover-related losses while maintaining a positive customer experience, including liaising with third-party vendors.

• Create statistical metrics highlighting the problems with potential solutions to improve customer experience.

• Provide support and/or approval for new procedures proposed by Tier 1 and Tier 2 analysts, and take ownership of particularly complex cases.

• Perform proactive, in-depth investigations by querying relevant data (Snowflake/Python/SIEM) and using available tooling.

• Develop, initiate, maintain, and revise automated strategies and approaches for Booking.com's Security and Cyber Operations within the broader organizational context.

• Keep internal documentation and procedures up to date, and develop new ways to uphold high standards of operations team performance.

• Monitor existing systems and metrics to identify efficiency issues and detect more advanced, complex incidents, escalating these to the CoE team under ASAF guidance and supervision for Incident Response.

• Maintain a strong understanding of the Account Security threat landscape to continually improve detection and prevention methods.

• Represent the team with external stakeholders and act as the go-to Subject Matter Expert when consulted.

B.skilled

• Advanced Tableau or similar skills.

• Advanced SQL skills.

• Advanced SIEM skills.

• Advanced Data Analysis skills, including the ability to manipulate and format large data sets and train/coach others to do the same.

• Advanced Python skills are highly desirable.

• Strong knowledge of Account Takeover, Credential Stuffing, Authentication, Fake Accounts, and Phishing.

• Advanced product, controls, and domain knowledge in Cyber Security.

• Strong stakeholder management skills.

• Up-to-date domain knowledge of recent Cyber Threat scenarios.

• Bachelor's or Master's degree (preferably in Information Technology or Information Security), or equivalent relevant job experience, or relevant certifications.

• 5-8 years of relevant job experience (Advanced Job Knowledge).

• Great communication and problem-solving skills.

• Experience collaborating with Product/Engineering teams is a plus.

• Experience with Incident Forensics is a plus.

• Crisis management experience is a plus.

• Ability to work under pressure and adapt quickly to changing environments.

• Experience presenting to and consulting with customers/partners is a strong asset.

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.