At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.
Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.
Introduction to the Team:
We are part of the Cyber defense organisation, focused on detecting, analyzing and responding to security threats across the enterprise. Our mission is to proactively identify adversary behavior, strengthen detection capabilities and improve overall security posture.
In this role, you will:
Design, implement, and maintain security controls, tools, and services that protect Expedia Group platforms, applications, and infrastructure, with a focus on scalable, automated solutions.
Perform security design and low-level design reviews, including API design and data modeling, to identify and mitigate vulnerabilities across services and systems.
Lead and execute security assessments, threat modeling, and vulnerability remediation in partnership with engineering teams, driving secure-by-design patterns across multiple domains.
Build and enhance security monitoring, detection, and response capabilities, using data-driven analysis to improve signal quality, reduce noise, and strengthen incident response.
Collaborate with product, platform, and infrastructure teams to embed security into CI/CD pipelines and development workflows, including safely integrating and operating AI/ML‑enabled solutions that improve outcomes.
Drive security best practices, standards, and education across teams, enabling engineers to deliver features quickly and safely while maintaining Expedia Group’s security posture and regulatory commitments.
Experience and Qualifications:
Minimum Qualifications:
Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
5+ years of relevant professional experience.
Strong ability to parse data using tools like Splunk SPL, Kusto (KQL), or Elastic/YARA
Deep understanding of how hackers operate using the MITRE framework
Experience with Python or similar scripting languages to automate security tasks
Experience in central monitoring platforms like SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response).
Proficiency with common security concepts and technologies such as authentication and authorization, encryption, network and application security, vulnerability management, and security monitoring.
Preferred Qualifications:
Experience designing and operating security services or frameworks at scale in a cloud-native environment, including automation of security guardrails and controls across multiple domains.
Demonstrated ability to influence architecture and design for security across distributed systems, including driving secure patterns for APIs, data models, and low-level designs.
Strong background in building or improving security detection, incident response workflows, and metrics, using data to continuously refine coverage, reduce false positives, and improve time to detect and respond.
Safely integrates and operates AI/ML‑enabled solutions that improve outcomes, such as detection tuning, anomaly identification, or intelligent triage, while managing associated security and privacy risks.
Familiarity with AI-driven systems, tools, or workflows and practical experience applying AI/ML concepts to enhance or secure real world products and platforms.
Accommodation requests
Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.
About Expedia Group
Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.
Important notice
Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.
Equal Opportunity
Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.Skills Required
- Bachelor's degree in Computer Science or related field or equivalent experience
- 5+ years of relevant professional experience
- Ability to parse data using Splunk SPL, Kusto (KQL), or Elastic/YARA
- Deep understanding of attacker behavior using the MITRE framework
- Experience with Python or similar scripting languages for automation
- Experience with central monitoring platforms such as SIEM and EDR
- Proficiency with authentication/authorization, encryption, network and application security, vulnerability management, and security monitoring
- Experience designing and operating security services or frameworks at scale in a cloud-native environment
- Ability to influence architecture and design for security across distributed systems
- Background building or improving detection, incident response workflows, and metrics to reduce false positives
- Experience safely integrating and operating AI/ML-enabled solutions for detection and triage
- Familiarity with AI-driven systems, tools, or workflows applying AI/ML concepts to security
Expedia Group Compensation & Benefits Highlights
-
Wellbeing & Lifestyle Benefits — Travel and wellness reimbursements, employee travel discounts, and flexible stipends are presented as standout perks that add meaningful lifestyle value. Mental-health resources and pet support broaden the package beyond core pay.
-
Parental & Family Support — Paid parental leave for all parents with additional time for birthing parents, plus adoption, surrogacy, and caregiver support, are highlighted as generous and accessible. Immediate eligibility for parental leave reinforces the family-friendly design.
-
Healthcare Strength — Medical, dental, and vision coverage is paired with inclusive healthcare extending to partners and covering fertility and transgender services. Access to mental-health platforms complements the core medical offering.
Expedia Group Insights
What We Do
Expedia Group powers travel for everyone, everywhere through our global platform. Driven by the core belief that travel is a force for good, we help people experience the world in new ways and build lasting connections. We provide industry-leading technology solutions to fuel partner growth and success, while facilitating memorable experiences for travelers. Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™.
Why Work With Us
As travelers and technologists, we are passionate about making travel more seamless, accessible and memorable. We embrace different perspectives, celebrate new ideas, and empower every Expedian to drive meaningful change. The experiences we create bridge divides and broaden horizons – helping create unforgettable memories through travel.
Gallery
Expedia Group Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.