Expedia Group에서 보안 엔지니어를 채용합니다. SIEM/SOAR 플랫폼을 활용한 위협 탐지 및 대응 체계 구축이 핵심 업무입니다. 2~5년의 보안 엔지니어링 경력과 MITRE ATT&CK 프레임워크에 대한 이해가 필수입니다. 클라우드 환경에서의 보안 서비스 설계 및 자동화 역량을 갖춘 분을 찾습니다.
Hello!
You’re now leaving the Expedia Group careers site and will be directed to our supplier partner’s website to explore and apply for contract job opportunities with Expedia Group. The website is operated by Expedia Group’s employment partner.
*currently only offered in USA & UK
Full-Time Regular
07/09/2026
ID # R-107165
Share this position
Already Applied? View Your Account
At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.
Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.
We are part of the Cyber defense organisation, focused on detecting, analyzing and responding to security threats across the enterprise. Our mission is to proactively identify adversary behavior, strengthen detection capabilities and improve overall security posture.
You will support the design, development and tuning of detection capabilities across SIEM and SOAR platforms. You will work closely with analysts, incident responders and threat hunters to translate threats into actionable detections.
Design, implement, and maintain security controls and services that protect applications, infrastructure, and data across multiple products and platforms, leveraging strong system design, API design, and data modeling skills.
Assist in building and tuning detection rules across SIEM platforms
Develop and maintain correlation rules based on known attack patterns
Demonstrates understanding of attacker TTPs and how to detect them
Contributes to reducing false positives and improving detection quality
Document detection logic, use cases and response workflows
Map detections to frameworks like MITRE ATT&CK and the Cyber Kill Chain
Analyze logs and telemetry to identify suspicious patterns and gaps in detection
Participate in detection engineering lifecycle from ideation, development, testing and tuning
Collaborate with SOC and Incident Response teams to improve alert fidelity and reduce false positives
Assist in threat modeling and contribute to defense in depth strategies
Support development of automated workflows and playbooks in SOAR tools
Stay updated on emerging threats, attacker techniques and detection strategies
Apply familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products to strengthen detection, response, and prevention capabilities across multiple security domains
Bachelor’s degree in Computer Science, Information Security, related technical field, or equivalent practical experience.
2–5 years of experience in security engineering, software engineering with a security focus, or infrastructure/security operations in cloud-based environments.
Experience designing, implementing, and operating security-related services or components (such as authentication/authorization, secrets management, encryption, or security monitoring) with clear ownership for the reliability, performance, and security of those services.
Understanding of security frameworks such as MITRE, Cyber Kill Chain
Familiarity with SIEM platforms (e.g. Splunk, Sentinel, QRadar), SOAR platforms and automation concept, Log analysis (authentication logs, network logs, endpoint telemetry)
Exposure to detection rule creation and tuning, correlation logic and alert engineering and basic scripting (Python, PowerShell or similar)
Understanding of network fundamentals (DNS, HTTP, TCP/IP), common attack techniques (phishing, credential theft, lateral movement), defense-in-depth principles
Exposure to threat intelligence concepts
Practical experience integrating or securing AI/ML-enabled systems, such as protecting data pipelines, securing model endpoints, or using AI-driven tools to enhance threat detection and response, while safely integrating and operating AI/ML‑enabled solutions that improve outcomes.
Depth in at least one security specialization (such as cloud security, application security, identity and access management, endpoint security, or security automation) combined with the ability to work effectively across multiple technical domains.
Familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products to enhance security capabilities, such as automated risk analysis, intelligent anomaly detection, or adaptive access controls.
Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.
Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.
Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.
Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.
At Expedia Group, we're committed to providing an inclusive and accessible recruiting experience for candidates with disabilities. If you require an accommodation or adjustment for any part of the application or hiring process, please let us know by completing our Accommodation Request form.
Request a disability accommodation
at Expedia Group!
Full-Time Regular
07/09/2026
ID # R-107165
Share this position
