At a glance
- Employment
- Full-time
- Workplace
- Hybrid
- Location
- Berlin
About the role
- As a Security Engineer at KAYAK, you will help to drive our vulnerability management program while contributing across multiple security domains in a collaborative, globally distributed environment.
- Security at KAYAK is a team effort protecting the people, systems, and data that power travel for millions of users worldwide by working closely with engineering, operations, and product teams.
Responsibilities
- Support and continuously improve the vulnerability management program defining processes for identifying, prioritizing, tracking, and driving remediation of security findings across infrastructure and applications.
- Participate in incident response activities, including triage, investigation, containment, and post-incident documentation.
- Support application security initiatives, including automated code scanning, dependency analysis, and working with engineering teams to address security findings early in the development process.
- Help configure, monitor, and improve security tooling across areas such as endpoint protection, email security, identity and access management, and cloud security posture.
- Contribute to security automation and orchestration workflows that reduce manual effort and improve response times.
- Collaborate with engineering, operations, and compliance teams to embed security thinking into development workflows and infrastructure changes.
- Document processes, runbooks, and findings to support team knowledge sharing and continuity.
- Participate in access reviews and support identity and access management processes in line with established policies.
- Stay current with the evolving threat landscape and contribute ideas for improving the team's detection and response capabilities.
Requirements
- A solid understanding of cybersecurity fundamentals including networking, operating systems (Linux, macOS, or Windows), and cloud environments.
- Hands-on experience in at least one security domain, such as vulnerability management, incident response, application security, endpoint security, or identity and access management.
- Experience working with security tooling such as vulnerability scanners, endpoint detection and response platforms, or SIEM systems.
- Familiarity with AI tools and how they can be applied in a security context for automating workflows, triaging alerts, or improving detection and response.
- The ability to communicate clearly in writing and in conversation in English.
- A collaborative approach to problem-solving, asking questions, sharing what you learn, and supporting teammates.
- Comfort working with some degree of autonomy on assigned tasks and projects.
Preferred qualifications
- Familiarity with the NIST Cybersecurity Framework or similar security frameworks.
- Experience with cloud environments (AWS or GCP) or container security.
- Exposure to security automation or scripting like Python or workflow automation tools.
- Experience working in a regulated environment such as SOC 2 or PCI.
- Experience working with AI models or building AI-assisted workflows.
Benefits
- Work from (almost) anywhere for up to 20 days per year
- Company-paid therapy sessions through SpringHealth
- Company-paid subscription to HeadSpace
- Company-wide week off a year
- No meeting Fridays
- Paid parental leave
- Generous paid vacation + time off for your birthday
- Paid volunteer time
- Development Dollars and leadership development
- 6 weeks paid vacation
Workplace
- Required to work from the Berlin, Germany office 3 days per week.
Skills
- Linux
- macOS
- Windows
- AWS
- GCP
- Python
