Director of Cyber Security

About the Role

KAYAK, part of Booking Holdings (NASDAQ: BKNG), is a leading travel search engine. With billions of queries across our platforms, we help people find their perfect flight, stay, rental car and vacation package. We're also transforming business travel with a new corporate travel solution, KAYAK for Business. As an employee of KAYAK, you will be part of a travel company that operates a portfolio of global metasearch brands including momondo, Cheapflights and HotelsCombined, among others. From start-up to industry leader, innovation is in our DNA and every employee has an opportunity to make their mark. Our focus is on building the best travel search engine to make it easier for everyone to experience the world.

KAYAK's Security team exists to protect the company and its customers through comprehensive, agile, and collaborative security measures — with a human approach to policy, training, and awareness. We follow the NIST Cybersecurity Framework across six domains (Govern, Identify, Protect, Detect, Respond, and Recover).

We are looking for a Director of Cybersecurity to lead a global team of security engineers. This is a hands-on leadership role for an experienced security practitioner who will set direction for our technical security programs, support the growth of their team, and work closely with engineering and infrastructure partners to keep our systems and people secure — balancing strong protection with the business's need for agility and innovation. This role is required to work from our Concord, MA office 3 days a week.

Job Responsibilities

• Partner with the CISO and other senior teammates to define and execute the organization’s cyber security strategy, roadmap, and operating model, ensuring security initiatives are measurable, operationally actionable, and aligned with business priorities.
• Lead, mentor, and support a global team of security engineers across multiple disciplines, including incident response, vulnerability management, identity and access management and application security.
• Own the day-to-day operations of the security program — including threat detection and response, vulnerability management, and endpoint security — and ensure the team has the support and clarity needed to execute effectively.
• Partner with engineering, infrastructure, and product teams to embed security into how we build and operate systems.
• Manage vendor relationships and contribute to budget planning for security tooling and services.
• Support the hiring, onboarding, and career development of your team members, fostering a culture of learning, collaboration, and continuous improvement.
• Explore and champion the use of AI and automation to improve how the team operates — this is an active area of investment for us.
• Evaluate emerging threats and technologies, including