Senior Security Engineer at OpenTable

<p>This will be a remote role to start, with plans to transition to hybrid in-office 2x/week located in downtown Toronto.</p> <p>With millions of diners, 60,000+ restaurant partners and 25+ years of experience, OpenTable, part of Booking Holdings, Inc. (NASDAQ: BKNG), is an industry leader with a passion for helping restaurants thrive. Our world-class technology empowers restaurants to focus on what matters most – their team, their guests, and their bottom line – while enabling diners to discover and book the perfect restaurant for every occasion.&nbsp;</p> <p>Every employee at OpenTable has a tangible impact on what we do and how we do it. You’ll also be part of a global team and its portfolio of metasearch brands. Hospitality is all about taking care of others, and it defines our culture.</p> <p><strong>Responsibilities:</strong></p> <ul> <li>Conduct threat modeling and security design reviews for new and changing application features, APIs, and integrations; provide actionable guidance to engineering and product teams.</li> <li>Partner with Product and Engineering to translate business requirements into security requirements, performing risk assessments and defining compensating controls when needed.</li> <li>Translate risk findings and incident learnings into prioritized remediation plans and mitigations, including short-term risk reduction and long-term design improvements.</li> <li>Build and maintain automation to scale the design review process and streamline vulnerability triage.</li> <li>Serve as a subject matter expert during security incidents. Assist in triage, analysis, and technical containment.</li> <li>Drive post-incident and post-release learning. Turn incident learnings into new design patterns, detection alerts, or developer training to prevent recurrence.</li> <li>Monitor the threat landscape to ensure our design reviews and IR playbooks stay ahead of modern attack vectors</li> <li>Evaluate and implement vendor security solutions that improve detection, response, and secure design, ensuring effective integration into security processes.</li> </ul> <p><strong>Our Ideal Candidate Will Have:</strong></p> <ul> <li>5-7 years of combined Information Security Experience</li> <li>B.S. or M.S. Computer Science or a related field, or equivalent experience</li> <li>A fast learning curve and a track record of partnering effectively with cross-functional teams to achieve security goals</li> <li>A "consultant" mindset with the ability to offer alternatives, partnering with engineers to find creative solutions that satisfy both security requirements and product deadlines</li> <li>Experience in assessing new application features and establishing secure guidelines for Product teams</li> <li>Comfort in the "heat of battle" with the technical depth to triage application-layer attacks and assist in steering a team toward containment</li> <li>Skill in explaining complex security concepts to audiences ranging from Product Managers to Senior Engineers</li> <li>Proficiency in at least one backend language (e.g. Java, Python, etc) and can navigate unfamiliar codebases to identify logic flaws and vulnerabilities,</li> <li>Solid understanding of network and web protocols.</li> <li>Experience with the security of intra-company and third-party APIs.</li> <li>Operate with a high level of independence</li> <li>Candidate Bonus Points for the Following: <ul> <li>Technical certifications within information security (CISSP, CCSP, OSCP, OSWE or equivalents)</li> <li>Experience with access and identity management</li> <li>Experience with SIEM and log management</li> </ul> </li> </ul> <p><strong>Benefits</strong>:</p> <ul> <li>Generous paid vacation + time off for your birthday</li> <li>Work from (almost) anywhere for up to 20 days per year</li> <li>Focus on mental health and well-being: <ul> <li>Company-paid therapy sessions through SpringHealth</li> <li>Company-paid subscription to Headspace</li> <li>Annual company-wide week off - the whole team fully recharges (and returns without a pile-up of work!)</li> </ul> </li> <li>Paid parental leave</li> <li>Paid volunteer time</li> <li>Focus on your career growth: <ul> <li>Development Dollars</li> <li>Leadership development</li> <li>Access to thousands of on-demand e-learnings</li> </ul> </li> <li>Travel Discounts</li> <li>Employee Resource Groups</li> <li>Private health and dental insurance</li> <li>Life and Disability insurance</li> </ul> <p>There are a variety of factors that go into determining a salary range, including but not limited to external market benchmark data, geographic location, and years of experience sought/required. The expected range of compensation for this position based in Toronto, Canada, including commission and/or bonuses is $130,000-$160,000 CAD.</p> <p>We offer a competitive base salary and benefits including: health benefits; flexible spending account; retirement benefits; life insurance; paid time off (including PTO, paid sick leave, medical leave, bereavement leave, floating holidays and paid holidays); and parental leave benefits. This role is eligible to be considered for an annual bonus and equity grant.</p> <p><strong>Work Environment &amp; Flexibility</strong></p> <p>At OpenTable, we pride ourselves on fostering a global and dynamic work environment. As a team member with us, you will benefit from a schedule tailored to accommodate a global workforce operating across multiple time zones. While the majority of your responsibilities may align with conventional business hours, there will be instances where you are expected to manage communications - via calls, Slack messages, or emails - outside of regular working hours to effectively collaborate with international colleagues, respond to restaurant partners, and/or address urgent matters. OpenTable will always abide by and consider local laws and regulations.</p> <p><strong>Inclusion</strong></p> <p>We’re committed to creating a workplace where everyone feels they belong and can thrive. We know the best ideas come when we bring different voices to the table, so we're building a team as dynamic as the diners and restaurants we serve—and fostering a culture where everyone feels welcome to be themselves.</p> <p>If you need accommodations during the application or interview process, or on the job, we’re here to support you. Please reach out to your recruiter to request any accommodations.</p> <section class="account-page__wrapper page-layout page-layout--primary-panel-workspace page-layout--large" data-test-settings-wrapper="" data-test-page-layout=""> <div class="page-layout__grid-container"> <div class="page-layout__workspace" data-test-page-layout-workspace=""> <div class="account-page-workspace-content" data-test-account-page-workspace="" data-artdeco-is-focused="true"> <div class="setting-container"> <div class="setting-group" data-test-promotion-settings-page=""> <div class="setting-group__list"> <div class="ember-view setting-group-item promotion-settings-page__item" data-test-selector="setting-group-item"> <div class="setting-item-core__grid-container" data-test-setting-item="form-closed" data-test-promotion-tag-setting="" data-live-test-promotion-tag-setting="" data-live-test-setting-item=""> <div class="setting-item-core__right-pane"> <div class="ember-view setting-item-core__state t-14 t-black--light" data-test-selector="setting-item-core-state" data-test-promotion-tag-setting-state="">#LI-LR1</div> <div class="ember-view setting-item-core__state t-14 t-black--light" data-test-selector="setting-item-core-state" data-test-promotion-tag-setting-state="">#LI-Hybrid</div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </section> <section class=""></section>