Junior Security Intelligence & Response Analyst

About Booking Holdings Romania

Booking Holdings Romania is a Center of Excellence located in Bucharest, Romania. It was established to support the growing business demands of the Booking Holdings Brands, providing access to specialized talent, leading industry best practices, and collaboration opportunities across all our Brands.

As part of our Booking Holdings Romania team, you will contribute to the world's leading provider of online travel, working towards a mission of making it easier for everyone to experience the world through our five primary consumer-facing brands: Booking.com, Priceline, Agoda, KAYAK, and OpenTable.

The Role: Junior Security Intelligence & Response Analyst

The Junior Security Intelligence & Response Analyst is a critical front-line defense role within the Global Security Operations Centre (GSOC), primarily protecting the organization's people and assets. This role also provides essential support in safeguarding customers and partners. The GSOC is part of the broader Group Regional Security Intelligence and Response Capability Area (CA), which delivers regional and global people/physical security intelligence and response capabilities through three distinct teams located in Norwalk, Amsterdam, Bucharest, and Singapore.

The analyst will adhere to established procedures, performing global active monitoring, conducting research, assessing geopolitical events, identifying developing trends, and triaging incoming safety and security cases, both internal and external. This often requires the utilization of OSINT tools and techniques. The goal is to continuously develop these services to provide the best internal capability.

You will play an integral role in the development, testing, and implementation of safety and security standard operating procedures (SOPs), detecting, triaging, and escalating security operations issues, and managing these cases under supervision.

This role offers a hybrid work model, requiring an onsite presence of 2 days/week. The Junior Security Intelligence & Response Analyst will join an inclusive, high-performing team. The position demands strong interpersonal and cross-cultural skills, a proactive and learner mindset, coupled with the ability to think tactically and communicate clearly under pressure, both verbally and in writing.

Key Job Responsibilities and Duties

Active Monitoring & Intelligence Analysis

• Continuously monitor and escalate local and global events—from geopolitical shifts to natural disasters—that could impact the organization. Identify potential risks to our people, operations, assets, and stakeholders against predefined thresholds and in line with established procedures.
• Draw on a diverse range of sources, including intelligence vendors, open-source intelligence (OSINT), and your own network, to gather comprehensive security insights. Work collaboratively with other Subject Matter Experts (SMEs) within the Capability Area, particularly the Lead Analysts.
• Conduct various research tasks as required and directed by Team Leads or others to help the business understand risks to employees, assets, or reputation.
• Help maintain, populate, and evaluate our intelligence databases, ensuring accuracy and accessibility.
• Configure various internal and vendor tools to ensure the relevance of intelligence served against defined requirements.
• Support a process of continuous improvement by collecting and analyzing data to enhance the service provided by our vendors and our internal services to employees.
• Support with Capability Area projects and initiatives as required to further build and enhance our security intelligence capability.

Security Response

• Receive, log, and triage employee security incidents globally, including emergencies like fire alarms, medical incidents, civil disturbances, and other situations requiring immediate support.
• Quickly assess and prioritize incoming security cases, ensuring timely and appropriate action in line with established SOPs.
• Work closely with stakeholders to debrief incidents, refine existing SOPs, and develop new ones to enhance our response capabilities.
• Implement predefined actions to mitigate immediate threats, investigate security incidents, and perform incident response, escalating to specialized teams within the broader security organization as needed.
• Support with Capability Area projects and initiatives as required to further build and enhance our security operations capability.

Communications & Stakeholder Management

• Translate complex world events into concise, relevant, and actionable intelligence products in line with Capability Area standards.
• Understand high-level intelligence and operations requirements of various teams; communicate clearly and effectively to non-security stakeholders on immediate-term security risks in a way that builds trust in services.
• Proactively communicate within the team with suggestions on points of improvement to drive ongoing service quality; embody the Company Values.
• Build strong and trusted relationships within all relevant Group Regional Security (GSR) teams.

Role Qualifications And Requirements

• Bachelor degree in International Relations, Political Science, Security Studies, War Studies, or similar (minimum).
• Master degree in International Relations, Political Science, Security Studies, War Studies, or similar (preferred).
• 1-3 years of relevant job experience.
• Awareness of the roles of a corporate GSOC.
• At least one year of work experience in a security risk management field (intelligence and/or operations).
• Experience in following governance documentation and standard operating procedures in a security context.
• Experience in undertaking intelligence tasks, such as OSINT investigations, and the writing of tactical, concise, and forward-looking intelligence briefs.
• Experience in security incident (not crisis) management using established SOPs based on industry best practice.
• Awareness of how to use security intelligence and operations vendors.
• Awareness of how to work cross-functionally with non-security SMEs to achieve security outcomes.
• Experience in using data capture systems to ensure analysis of risk mitigation efficacy; experience in use of AI tools across operational and non-operational security tasks.
• Awareness of general corporate security domains including: Travel security, Event security, Executive protection, Access control, Alarm monitoring (L1).

Benefits & Perks

• Contributing to a high-scale, complex, world-renowned product and seeing the real-time impact of your work on millions of travelers worldwide.
• Working in a fast-paced and performance-driven culture.
• Technical, behavioral, and interpersonal competence advancement via on-the-job opportunities, experimental projects, hackathons, conferences, and active community participation.
• Competitive compensation and benefits package.
• Vast amounts of data to validate your ideas and the opportunity to experiment with real users.

Key skills/competency

• Security Intelligence
• Incident Response
• OSINT Investigations
• Geopolitical Analysis
• Risk Assessment
• Standard Operating Procedures (SOPs)
• Active Monitoring
• Stakeholder Communication
• Security Operations
• Data Capture Systems