Security Engineer(GCP) at Booking Holdings

, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

25 Jun, 26

Salary

0.0

Posted On

27 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Google Cloud Platform, Security Engineering, Threat Detection, Incident Response, Cloud Security Architecture, Infrastructure As Code, Terraform, CSPM, Wiz, DevSecOps, Python, Golang, Bash, Compliance, Risk Assessment, Security Reviews

Industry

technology;Information and Internet

Description

We believe that the passion and talent of our employees is our strength – it is what drives us towards outstanding performance. We offer a dynamic, motivating and sophisticated work environment. A culture that is open, innovative and performance-oriented. Our scale and scope, commitment to people and high standards of integrity make Booking.com a great place to work. Booking.com’s Enterprise Security organisation is seeking a passionate engineer who wants to protect the world's largest travel platform against attacks on its production platform. Your skills will be the foundation of security initiatives that protect the security and privacy of all our customers, partners, and employees. The Enterprise Security organisation makes security effortless for our different production platforms. As part of this team, you will be performing security engineering, building advanced and novel detective and preventive controls, developing systems to automate remediation and advise product and infrastructure teams on how to keep our data safe. B.Responsible Design, implement, and maintain cloud security architecture for Google Cloud Platform (GCP) environment Configure and support security monitoring tools and security teams for threat detection and incident response Work closely with other security and platform teams to ensure cloud security measures meet regulatory requirements and contractual obligations (e.g. NIST, PCI DSS, GDPR, SOX) Support and respond to security incidents in cloud environments Optimise cloud security controls to balance security requirements with business needs and other requirements Support cloud security related assessments like pentests, audits and provide necessary documentation and evidence Conduct security reviews of cloud-based applications and services Participate in cloud architecture design discussions to ensure security is considered from the outset Participate in risk assessments and develop risk mitigation strategies for cloud deployments Provide security guidance and training to other teams within the organisation Communicate security concepts and risks to both technical and non-technical stakeholders Challenge ideas and methods while working together with talented, highly skilled team members; Help team members to improve their skills by providing technical guidance; Maintain and develop knowledge of cyber security trends; B.Skilled Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience). 6 - 12 years of professional experience in the Cloud Security domain. Cloud Platforms: Experience with Google Cloud Platform (GCP) and its security features. Knowledge of other public cloud platforms (e.g., AWS, Azure) is a strong advantage. Infrastructure as Code (IaC): Hands-on experience with IaC tools such as Terraform or Google Cloud Deployment Manager ( Infra Manager ). Cyber Security Expertise: Extensive knowledge of security engineering and cloud security principles. CSPM: Experience with a Cloud Security Posture Management (CSPM) / CNAPP tool, specifically Wiz. DevSecOps: Understanding of DevSecOps practices and security automation in CI/CD pipelines Scripting/Coding: Proficiency in coding and/or scripting using languages such as Bash, Golang, Python, Perl, or similar. Communication: Excellent written and verbal communication skills for effective stakeholder management. Security Assessments:Ability to perform security assessments and develop mitigation strategies for cloud deployments risks Compliance: Familiarity with major compliance frameworks and regulations (e.g., SOX, PCI DSS, GDPR). Nice to have Certifications: Professional-level cloud security certifications, such as the Google Cloud Certified Professional Cloud Security Engineer. Linux security and Network Security knowledge ( firewalls, vpn ). Agile methodology knowledge and understanding. Knowledge of containerization technologies (e.g., Docker, Kubernetes) and associated security measures Pre-Employment Screening If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Responsibilities

The engineer will be responsible for designing, implementing, and maintaining cloud security architecture for the Google Cloud Platform (GCP) environment, configuring security monitoring tools, and supporting threat detection and incident response activities. This role involves developing systems for automated remediation and advising product and infrastructure teams on data safety measures.