We aren't just looking for a manager; we are looking for a tactical leader. As the CSIRT Manager at Booking.com, you will own the operational heartbeat of our cyber defense. You will empower a highly skilled team of multiple Incident Responders and Threat Hunters to proactively hunt adversaries and crush high-severity threats before they impact our business. You will drive an automation-first approach, shape our response strategy, and serve as the technical authority when things get critical.
This role provides a hybrid way of working with an onsite presence of 2 days/week.
Key Job Responsibilities and Duties
Lead & Empower the Team:

• Coach & Scale: Lead, mentor, and grow a team of multiple elite Incident Responders. Build a culture of continuous learning, high performance, and psychological safety.
• Own the Roadmap: Partner with Cyber Defense & Response (CDR) leadership to build and implement a forward-looking strategy for our defense capabilities.
• Goal Setting & Impact: Define clear, actionable goals for the team and track success through impactful metrics (MTTD, MTTR) rather than just tracking busywork

Drive Operational Excellence:

• Command the Operation: Oversee day-to-day cyber operations across multiple defense services, including our Threat Hunting Capabilities
• Automate & Optimize: Champion continuous improvement. Relentlessly find opportunities to tune detections, automate repetitive tasks, and streamline our playbooks and workflows.
• Stakeholder Alignment: Act as the bridge between technical operations and senior leadership. Provide sharp, granular metrics and clear executive updates that translate technical risk into business impact.

Technical Command & Collaboration:

• The Final Escalation: Act as the ultimate escalation point. When a complex, Sev-1 incident hits, you are rolling up your sleeves, guiding the technical investigation, and driving mitigation.
• Continuous Testing: Support or Partner with Red, Blue, and Purple teams during live exercises. Use the findings to harden Booking.com’s defenses and close visibility gaps.
• Always Ready: Guarantee 24/7 protection of the Booking.com brand by managing the team's out-of-hours scheduling and readiness, while also actively sharing the load by personally providing on-call escalation support (nights, weekends, and holidays) as needed.

Benefits

• Health insurance
• Prepaid medical subscription (Regina Maria)
• Life insurance
• Meal vouchers
• Learning wallet
• Travel benefit
• Annual vacation leave of 25 business days, pro rata with the working period
• Birthday day off
• Summer break (short Fridays during summer)
• Work from Abroad program (up to 20 days/year in EU)
• Floating days off
• 2 Volunteer days/ year
• Home office one-time bonus
• Bookster
• Linkedin learning platform
• Headspace
• Employee discounts (travel, gym, dental, vision)