Security Engineer

About the role

As a Security Engineer, you will help drive the vulnerability management program while contributing across multiple security domains in a collaborative, globally distributed environment. You will work closely with engineering, operations, and product teams to protect the people, systems, and data that power travel for millions of users worldwide.

Responsibilities

• Support and continuously improve the vulnerability management program by defining processes for identifying, prioritizing, tracking, and driving remediation of security findings.
• Participate in incident response activities, including triage, investigation, containment, and post-incident documentation.
• Support application security initiatives, including automated code scanning, dependency analysis, and working with engineering teams to address security findings.
• Configure, monitor, and improve security tooling across areas such as endpoint protection, email security, identity and access management, and cloud security posture.
• Contribute to security automation and orchestration workflows to reduce manual effort and improve response times.
• Collaborate with engineering, operations, and compliance teams to embed security thinking into development workflows and infrastructure changes.
• Document processes, runbooks, and findings to support team knowledge sharing and continuity.
• Participate in access reviews and support identity and access management processes in line with established policies.

Required skills

• Cybersecurity fundamentals
• Networking
• Linux
• macOS
• Windows
• Cloud environments
• Vulnerability management
• Incident response
• Application security
• Endpoint security
• Identity and access management
• Security tooling
• AI tools

Nice to have

• NIST Cybersecurity Framework
• AWS
• GCP
• Container security
• Python
• SOC 2
• PCI

Qualifications

• Formal education, self-study, bootcamps, or professional experience in cybersecurity

Benefits

• Work from anywhere for up to 20 days per year
• Company-paid therapy sessions
• HeadSpace subscription
• Company-wide week off
• No meeting Fridays
• Paid parental leave
• Paid vacation
• Birthday time off
• Paid volunteer time
• Pension plan contributions

About the Company

KAYAK, part of Booking Holdings, is a leading travel search engine that operates a portfolio of global metasearch brands including momondo, Cheapflights and HotelsCombined. The company is focused on building the best travel search engine to make it easier for everyone to experience the world.