Security Product Manager

About Us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world.

About our team:

The Security Product Manager within Enterprise Security will drive customer-centric innovation and continuous improvement across a portfolio of internal security products and capabilities, with a particular focus on vulnerability management. 

Role overview:

A Security Product Manager is deeply committed to solving user pain points and identifying opportunities to improve the experience of teams that rely on Enterprise Security products. They collect and understand qualitative and quantitative data to inform and prioritise product direction, form and test hypotheses, and support the development of scalable technical capabilities that address the long-term needs of security stakeholders.

Key Job Responsibilities and Duties: 

The role contributes to the achievement of Enterprise Security’s vision and product strategy through stakeholder alignment, planning and delivery of end-to-end product enhancements. This includes building and maintaining the team backlog, setting objectives and roadmaps, proactively removing blockers through effective stakeholder management, and delivering outcomes on time and to a high standard.

The role involves analysing and distilling customer feedback from a variety of sources into actionable hypotheses, or to uncover unmet needs, validate new solutions or improve existing products. It requires aligning independently with a range of internal and external stakeholders to understand business and cross-domain objectives and translate them into clear product narratives and plans, particularly in vulnerability management and related enterprise security areas. 

Responsibilities include requirements gathering, prioritisation and continuous delivery of security across infrastructure platforms and workflows. This may include improving visibility, risk-based prioritisation, remediation automation, reporting and the overall experience of managing security vulnerabilities. The role requires analysing data and designing metrics and KPIs, in order to present findings to stakeholders and make effective product decisions with the results.

Another key focus area will be improving the efficiency and effectiveness of Enterprise Security products and internal processes by identifying opportunities for automation, orchestration and continuous improvement

Shape product direction

• Develop a clear product vision and roadmap for security products and capabilities.

• Understand customer and user needs, the wider security landscape and business priorities.

• Turn complex problems into focused opportunities, clear priorities and actionable plans.

• Make thoughtful trade-offs between security, usability, technical complexity and delivery effort.

• Define how success will be measured and use evidence to improve the product over time.

Understand users and their needs

• Build strong relationships with the people who use and depend on enterprise security products.

• Understand platform and developer team requirements, and the vital role security plays in scaling and stabilising the services they use to build. 

• Learn how security work happens in practice, including the challenges teams face when identifying and remediating vulnerabilities.

• Use research, feedback, data and operational insight to identify problems and test assumptions.

• Advocate for experiences that help teams make informed decisions and take effective action.

Deliver valuable products

• Work with Engineering and other partners to turn product opportunities into reliable, scalable solutions.

• Lead prioritisation and maintain a clear, outcome-oriented backlog.

• Coordinate dependencies and communicate progress, risks and decisions clearly.

• Ensure that products are secure, dependable, maintainable and easy to use.

• Support the full product lifecycle, from discovery and delivery through to adoption, improvement and retirement.

Work across Enterprise Security

• Help improve how security risks are identified, prioritised, communicated and addressed.

• Partner with security teams and technology specialists to understand threats, controls and operational needs.

• Stay curious about developments in cybersecurity, cloud technology, automation and artificial intelligence.

• Contribute to a consistent and user-centred approach to security product development.

Build alignment and influence

• Bring together diverse perspectives and create clarity when priorities compete.

• Communicate effectively with both technical and non-technical audiences.

• Influence decisions through sound reasoning, evidence and collaboration.

• Build trusted relationships across Product, Engineering, Security and the wider organisation.

Role Qualifications and Requirements:

• Broad Job Knowledge (3 - 5 years)

• Bachelor degree OR equivalent experience and Specialized Diploma (Relevant certifications)

• Experience in product management, technical product management or a related role, with a track record of delivering products or technology capabilities.

• Experience working with technical teams and translating user or business needs into product direction and priorities.

• A customer-focused and outcome-oriented approach to product management.

• Strong skills in discovery, prioritisation, roadmap development, delivery and stakeholder management.

• A good understanding of security principles and the challenges involved in managing technology risk.

• Experience in vulnerability management, infrastructure security, application security, security operations or a related area.

• The ability to understand complex technical concepts and make them accessible to different audiences.

• Strong analytical and problem-solving skills, with the ability to use data and feedback to inform decisions.

• Excellent written and verbal English communication skills.

Benefits & Perks - Global Impact, Personal Relevance:

Booking.com’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well unique-to-Booking.com benefits which include:

• Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave

• Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)

• Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and Booking.com wallet credit 

Diversity, Equity and Inclusion (DEI) at Booking.com: 

Diversity, Equity & Inclusion have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations. 

Take it from our Chief People Officer, Paulo Pisano: “At Booking.com, the diversity of our people doesn’t just build an outstanding workplace, it also creates a better and more inclusive travel experience for everyone. Inclusion is at the heart of everything we do. It’s a place where you can make your mark and have a real impact in travel and tech.” 

We ensure that colleagues with disabilities are provided the adjustments and tools they need to participate in the job application and interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.

Application Process: 

This role does not come with relocation assistance.

• Application and CV Review

• Recruitment Phone Screen

• Business Interview 1 

• Business Interview 2

• FIT Interview

• Hiring Decision

Let’s go places together: How we Hire

Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive.

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.