Data Security Analyst II

Data Security Analyst II at Booking.com

The Data Security Analyst II role at Booking.com combines day-to-day Data Security Operations under Product Security with leading large-scale data security incidents, especially those tied to regulatory obligations such as GDPR, PCI-DSS, AI Act, DMA, and DSA. Data Security Analyst II employees also work on projects with scope outside of the immediate team, contributing to the broader Product Security mission.

Key Responsibilities

• Identify, analyze, contain, respond to, and escalate system-generated signals and human-generated reports of data leakage, performing necessary response actions in alignment with department policies to meet external regulatory obligations.
• Initiate incident response, assist incident managers, and oversee analysts’ deliverables during data security incident response, adhering to the incident response and retrospective policy.
• Own and potentially lead quarterly/yearly objectives/projects, data research, and large-scale topic analysis, in alignment with the Capability policy, to ensure compliance with Security department and external regulatory obligations.
• Transform data into insights, identifying and quantifying improvement opportunities for Data Security processes, tooling, documentation, and other areas that enhance capability efficiency and reduce data leakage instances.
• Utilize a combination of manual and automated tools for proactive analysis of various data sets.
• Demonstrate curiosity to understand how our tools and systems work, building deep expertise and sharing knowledge to elevate team performance.
• Translate discoveries into repeatable practices—automation, runbooks, and guardrails—that reduce dependencies, increase team autonomy, and deliver measurable improvements in operational excellence.
• Contribute to or lead other projects that reduce data leakage while maintaining focus on a positive customer and employee experience.
• Develop and provide reporting to management that highlights trends in data leakage across teams, business units, and associated risks.
• Develops, initiates, maintains, and revises detections, automated strategies, and approaches for Booking.com’s Security and Cyber operations within the big picture of the organization.
• Support the Data Security product teams in the development of new tools and detection techniques for use in data leakage detection/prevention.
• Provide training and support education by sharing outcomes of analysis of data leakage trends and patterns to relevant staff.
• Contribute to Booking.com’s growth through interviewing, onboarding, or other recruitment efforts.

Knowledge & Skills

• Hands-on mentality
• Intermediate Excel/GSuite skills
• Intermediate SQL skills
• Ability to manipulate and format large data sets
• Understanding of concepts around privacy and risk management
• Excellent Stakeholders management
• Data Loss Monitoring/Prevention response and configuration experience (CASB, Mail, Endpoint, etc.)
• Experience responding to security incidents from start to finish
• Operations ownership
• Ability to prioritize incoming escalations and requests appropriately using established impact frameworks
• Great communication, questioning, and problem-solving skills

Benefits & Perks: Global Impact, Personal Relevance

• Possibility to live and work in Amsterdam, named as the best city in the World for living a happy and healthy life.
• International and diverse company culture.
• Possibility to innovate through multiple company programs (e.g., Hackathon, twice a year).
• Opportunity to work in an Agile, startup-like development environment.
• Excellent support for personal development through online platforms.
• Mentorship programs to accelerate skills growth.
• Contribute to the company tech transformational journey toward a more modern tech stack.
• Inclusive leadership, valuing the opinion of everyone independently of their career level.
• Great compensation package.
• Multiple perks that will make your life easier (e.g., discounts to local shops, discounted gym membership, etc.).

#ThinkInclusion: Wellbeing & Inclusion at Booking.com

Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. We’re committed to fostering a more inclusive Booking.com experience for the millions of travelers, partners, and communities around the world who use our platform every day. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education, and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Key skills/competency

• Data Security Operations
• Incident Response
• Regulatory Compliance (GDPR, PCI-DSS)
• Data Loss Prevention (DLP)
• SQL
• Data Analysis
• Stakeholder Management
• Security Tools Configuration
• Risk Management
• Automation