Security Engineer II

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.

Why Join Us?

To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win.

We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a global hybrid work setup (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We're building a more open world. Join us.

Introduction to team

Are you passionate about cloud and the technology needed to drive security? Do you love engineering of critical security systems and services; including Endpoint detection and Response, Intrusion Detection, Data Leakage Prevention, Web Content Filtering, Firewall Compliance, Vulnerability and Security Event Management?
Expedia Group Security Solutions Engineering team is searching for a top-notch Security Engineer who will deliver on key initiatives, starting from the idea phase all the way through requirements definition, analysis, technical specifications, engineering & deployment. This is a highly visible role that requires an understanding of our large, complex technical environment and has the ability to design/engineer simple, elegant technical security solutions.

In this role, you will:

• Endpoint detection and response - EDR Anti-malware Agents, Advanced threat protection, Data Loss Prevention

• Web Content Filtering - Seamless Internet protection, On premise and cloud based web proxies

• Vulnerability Management - DC and cloud asset vulnerability patching and compliance

• Threat Intelligence - Intelligence feeds from sources like Recorded Future

• Threat detection - User Behavior Analysis and investigation

• SIEM & SOAR solutions and integrations

• Container security and discovery

• Network security - Web Application Firewall, Intrusion Prevention, network based spyware, Anti-malware detection and blocking, AWS Guard Duty

• Security audit and Orchestration tools

• Proactively maintain, monitor and improve our systems and security posture with a focus on service excellence

• Write and contribute to project plans, author engineering level documentation, and develop detailed test plans.

• Collaborate with business and technical teams to solve complex problems

• Influence the engineering practices within and beyond the Affinity team

Experience and qualifications:

• 3+ years of experience in security engineering and operations support of a mission critical environment

• Hands on experience with AWS Cloud services like EC2, VPC, S3, IAM, CloudFormation and Lambda; relevant experience with AWS cloud security is highly preferred

• Hands On / administration experience of Web Content Filtering(WCF), Web Application Firewalls(WAF), Intrusion Detection Systems(IDS), Vulnerability Management(VM) & Patching, Password Management, Data Loss Prevention(DLP), Endpoint Detection & Response(EDR), SIEM, Resilient SOAR etc.

• Knowledge and understanding of systems and/or network design principles and thorough understanding of security principles and technical architectures.

• Ability to correlate and analyze log information, packet captures, security alerts, and artifacts.

• Preferred if you have applied computer programming and/or scripting language experience (Java, Python, Perl, Ruby, C++ etc.)

• Excellent organizational and communication skills, interacting with security stakeholders, gathering requirements, implementing security solutions etc.

• Innovation driven mindset, reducing technical debt by optimizing security solutions, and automating day to day tasks.

• Ability to thrive in a dynamic, collaborative and fast paced environment.

• Strong interpersonal skills as well as strong problem-solving and analytical skills.

Accommodation requests

If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through the Accommodation Request.

We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award-winning culture by organizations like Forbes, TIME, Disability:IN, and others.

Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you're confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs.