# Booking Holdings Romania - Threat Exposure Senior Security Engineer - Pipeline at Booking.com

Booking.com is hiring a Booking Holdings Romania - Threat Exposure Senior Security Engineer - Pipeline for a remote role open to applicants in Romania. Level rates it Little AI ●○○○; you can [apply on Booking.com](https://jobsbylevel.com/go/dc34e048-e6ff-42f3-b174-82d3e47b3496?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Remote (Bucharest, Romania).

## Details

- Company: [Booking.com](https://jobsbylevel.com/companies/booking-com)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Remote (Bucharest, Romania)
- Posted: November 4, 2026
- Apply: https://jobsbylevel.com/go/dc34e048-e6ff-42f3-b174-82d3e47b3496?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=booking-holdings-romania-threat-exposure-senior-security-engineer-pipeline-at-booking-com-bd2609

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/booking-holdings-romania-threat-exposure-senior-security-engineer-pipeline-at-booking-com-bd2609

## Description

Booking Holdings Romania is a Center of Excellence based in Bucharest, Romania and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands. As part of our Booking Holdings Romania team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through six-primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK, OpenTable and Rentalcars.com . Role description The Senior Security Engineer – serves as a technical lead and subject matter expert for the Threat Exposure Management (TEM) capability: designs, builds and operates the technical foundation across four areas: Threat Detection & Engineering, Security Tooling & Architecture, Threat Intelligence Integration, and Automation & Orchestration. The role exists to turn external threat information into timely, evidence-backed answers on whether Booking Holdings brands are exposed, and to route each relevant exposure to the accountable team, with visibility over the actions taken through to verified closure. Success means a scalable, auditable and federated capability, adopted by the brands, that measurably reduces the time needed to determine and remediate exposure. This role provides a hybrid way of working with an onsite presence of 2 days/week. Key Job Responsibilities and Duties Threat Detection & Engineering Designs, builds and maintains exposure detection logic and threat hunting queries in line with the TEM data contract, to determine quickly and defensibly whether emerging threats affect Booking Holdings brands. Owns the operational health of the TEM pipeline and automations, including reliability and performance improvements. Translates threat intelligence and potential threats into detection use cases, validating and tuning them with brand detection and response teams to reduce false positives and evidence gaps. Security Tooling & Architecture Designs and evolves the TEM technical architecture (threat intelligence aggregation, asset and software inventory, orchestration and case management) together with security architecture and brand engineering teams, ensuring a scalable, secure and federated capability. Evaluates, integrates and operates security tooling such as threat intelligence, cyber asset attack surface management (CAASM), SBOM and orchestration platforms, providing technical input to build-versus-buy decisions and applying least-privilege access, secrets management and change control. Threat Intelligence Integration Integrates commercial, open-source and internal threat intelligence sources into a normalized, deduplicated signal pipeline, correlating threat indicators with brand assets and inventories to prioritize relevant exposures. Monitors feed health and ingestion and detects failures before they lead to wrong or missing exposure answers. Defines and maintains the exposure data model (affected components and versions, exposure window, evidence coverage, confidence), keeping threat credibility separate from internal exposure so that incomplete evidence is reported as indeterminate rather than as not affected. Automation & Orchestration Builds and maintains automated workflows (e.g., low/no-code or native services) that route exposures to accountable brand owners, track SLAs and escalations, and keep an auditable record of the actions taken from intake to verified closure. Develops dashboards and reporting on TEM KPIs, such as time to exposure answer, evidence coverage, indeterminate rate and verified remediation, for technical teams and security leadership, using version control, testing and code review practices. Cross-cutting Uses version control, automated testing, code review and controlled deployment practices across integrations,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/booking-holdings-romania-threat-exposure-senior-security-engineer-pipeline-at-booking-com-bd2609

Source: https://jobsbylevel.com/jobs/booking-holdings-romania-threat-exposure-senior-security-engineer-pipeline-at-booking-com-bd2609

## Cite this page

Level. https://jobsbylevel.com/jobs/booking-holdings-romania-threat-exposure-senior-security-engineer-pipeline-at-booking-com-bd2609.

Get job alerts: https://jobsbylevel.com/newsletter