Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 hours agoWe saw it 83 min after it went up

Booking Holdings Romania - Junior Application Security Analyst

workingatbooking110 open roles

Where
Bucharest, Bucureşti, Romania
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowBooking Holdings Romania - Junior Application Security Analystworkingatbooking · Bucharest, Bucureşti, Romania

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on workingatbooking's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. workingatbooking postings stay open a median of 7 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 3 hours ago

workingatbooking median: 7 days open

The posting

Booking Holdings Romania is a Center of Excellence based in Bucharest, Romania and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands.

As part of our Booking Holdings Romania team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through five primary consumer-facing brands: Booking.com, Priceline, Agoda, KAYAK and OpenTable.

Role description

We are looking for a Junior Application Security Analyst to help protect applications and services through initial vulnerability triage, remediation follow-up, and investigation of application security alerts. Work with experienced colleagues using established procedures and playbooks.

This role provides a hybrid way of working with an onsite presence of 2 days/week.

Key Job Responsibilities and Duties

  • Triage and validate reported application vulnerabilities from scanning tools, internal assessments and other reporting channels.
  • Support initial severity assessment and prioritization using established guidance; flag uncertainty or potentially high-impact issues.
  • Track assigned remediation items, follow up with development teams, and verify straightforward fixes using documented procedures.
  • Review detection signals and alerts for exploitation attempts, suspicious application behavior, API misuse and automated abuse.
  • Examine HTTP requests, application logs and available telemetry; identify likely false positives and document evidence.
  • Escalate complex vulnerabilities, ambiguous alerts and urgent findings to senior colleagues.
  • Maintain clear investigation records and contribute updates to triage and remediation playbooks.
  • Record vulnerability source, affected application, reproduction evidence, ownership and remediation status; follow up on overdue items and escalate blockers.
  • Use established risk criteria to consider CVSS severity alongside exposure, exploitability, affected functionality and known exploitation; seek guidance when evidence is incomplete.
  • Review HTTP methods, parameters, responses, session and API activity to explain why an alert may indicate an attack rather than expected user behavior.

Role Qualifications and Requirements

  • Bachelor’s Degree and 1-3 years of relevant experience
  • Basic understanding of OWASP Top 10, HTTP/HTTPS, APIs, authentication, and authorization.
  • Familiarity with vulnerability severity, risk, remediation, and common application attack patterns.
  • Ability to interpret basic logs and alerts, organize evidence, and communicate findings clearly.
  • Attention to detail, analytical curiosity, and ability to work constructively with colleagues.
  • Ability to distinguish an observed attack attempt from a confirmed successful compromise and to state uncertainty clearly.
  • 24/7 Availability
  • Good English-speaking skills

Benefits & Perks

  • Contributing to a high scale, complex, world renowned product and seeing real-time impact of your work on millions of travelers worldwide
  • Working in a fast-paced and performance driven culture
  • Technical, behavioral and interpersonal competence advancement via on-the-job opportunities, experimental projects, hackathons, conferences and active community participation
  • Competitive compensation and benefits package
  • Vast amounts of data to validate your ideas and the opportunity to experiment with real users

Booking Holdings is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against workingatbooking's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on workingatbooking's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    workingatbooking's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.