Security Engineer III - Threat Detection

At Expedia Group, we help travelers explore the world, one journey at a time.

As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy.

Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work.

Join us and build for travelers everywhere.

Introduction to the Team:

We are part of the Cyber defense organisation, focused on detecting, analyzing and responding to security threats across the enterprise.

Our mission is to proactively identify adversary behavior, strengthen detection capabilities and improve overall security posture.

In this role, you will:

Design, implement, and maintain security controls, tools, and services that protect Expedia Group platforms, applications, and infrastructure, with a focus on scalable, automated solutions.

Perform security design and low-level design reviews, including API design and data modeling, to identify and mitigate vulnerabilities across services and systems.

Lead and execute security assessments, threat modeling, and vulnerability remediation in partnership with engineering teams, driving secure-by-design patterns across multiple domains.

Build and enhance security monitoring, detection, and response capabilities, using data-driven analysis to improve signal quality, reduce noise, and strengthen incident response.

Collaborate with product, platform, and infrastructure teams to embed security into CI/CD pipelines and development workflows, including safely integrating and operating AI/ML‐enabled solutions that improve outcomes.

Drive security best practices, standards, and education across teams, enabling engineers to deliver features quickly and safely while maintaining Expedia Group’s security posture and regulatory commitments.