Security Engineer II

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.

Why Join Us?

To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win.

We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a flexible work model (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We’re building a more open world. Join us.

Role Summary

Working as a part of the follow the sun 24/7 operating model this role will be the first line of defense monitoring security event alerts across a numerous technologies and brands from phishing alerts: identity,  cloud, EDR, network, UEBA, API, WAF, user and other team reported events.

In this role, you will:

• Perform advanced level of security investigation on following areas: Application Security, Cloud Security, Data Security, Network Security and Perimeter Security.

• Gather data and drill down to root cause analysis, ability to proactively recommend effective courses of containment, remediation and communicate to the various levels in the organization.

• Analyze security events, vulnerabilities, and misconfigurations, and partner with engineering teams to drive timely remediation and long-term risk reduction.

• Responsible for the immediate escalation of Security issues ensuring adherence to SLAs and driving resolution/mitigation.

• Flexibility as the position will require shifts to cover 24x7 follow the sun in line with US and APAC operations.

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.

• Professional experience in security engineering, security operations, or related software/infrastructure engineering roles, including hands-on work with security tooling and controls.

• Experience owning and operating security capabilities or services end-to-end, including monitoring, triage, and incident response within a production environment.

• Proficiency with core security concepts such as authentication/authorization, encryption, network security, vulnerability management, and secure configuration of cloud or on-premises systems.

• Familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products in a secure manner.

Preferred Qualifications:

• Experience working in a security operations center or CSIRT function.

• Working with EDR solutions and forensics experience

• Cloud security experience

• Cybersecurity certifications

Accommodation requests

If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through the Accommodation Request.

We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award-winning culture by organizations like Forbes, TIME, Disability:IN, and others.

Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50

Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs.

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.