The Senior Penetration Tester defines and leads the execution of highly technical and specialized engagements and designs new techniques of testing based on the evolution of industry best practices over time. They are both performing hands-on technical testing without requiring supervision and are coordinating teams of testers to ensure that the engagement objectives are met. They strengthen Booking Holdings brands security posture by proactively identifying vulnerabilities and security control gaps in our systems and applications.
The Senior Penetration Tester provides critical input to the group's brands with the development of the security assurance strategic plan based on subject matter expertise to increase the impact and value added through this area of focus. The Senior Penetration Tester also helps further grow the security assurance area by mentoring other team members and members of other technical non-pentester communities within the Booking Holdings group. The Senior Penetration Tester has strong stakeholder management skills that enable effective communication of technical information to multi-level (up to CISO/CSO level), technical and non-technical audiences within the broader Booking Holdings organization.
This role provides a hybrid way of working with an onsite presence of 2 days/week.
Key Job Responsibilities and Duties

• Plan and organize any externally and internally performed security assurance activities
• Coordinate security assurance engagements executed by external testers
• Execute security assurance engagement testing
• Document and formally report the outcomes of the security assurance activities both to a technical and non-technical audience
• Align with Booking Holdings on the overall security assurance landscape for the Group
• Coordinate and support the contractual relationship and alignment with external security assurance vendors
• Align business testing needs with timely and relevant threat information and verify the organization’s security posture against them
• Perform other duties as assigned
• Research and innovate, regularly research and learn new TTPs, and apply this knowledge to update testing methodology and tools.
• Understand breach and attack simulation solutions, working with them to automate control validation and effectiveness.
• Liaise with security teams to mature prevention, detection, and response capabilities
• Mentor and support junior teammates

Benefits:

• Health insurance
• Prepaid medical subscription (Regina Maria)
• Life insurance
• Meal vouchers
• Learning wallet
• Travel benefit
• Annual vacation leave of 25 business days, pro rata with the working period
• Birthday day off
• Summer break (short Fridays during summer)
• Work from Abroad program (up to 20 days/year in EU)
• Floating days off
• 2 Volunteer days/ year
• Home office one-time bonus
• Bookster
• Linkedin learning platform
• Headspace
• Employee discounts (travel, gym, dental, vision)