Security Engineer I

Would you like to work in an engineering & operations team managing critical security systems and services?

Expedia Group Security Solutions Engineering team is searching for a top-notch Security Operations Engineer who could deliver on primary objectives like configure, manage, monitor critical security systems and tools in various security domains like Web Content Filtering, Data Loss prevention, Endpoint Detection & Response, Vulnerability management, edge protection, SIEM (Security Information Event Management) and SOAR platforms.

This person will be a supporting-level team member who is well-versed in basic principles of technical, IT, infrastructure or systems engineering. They will work as a supporting player on complex projects and engage in discussion of new topics and feel empowered to challenge the status quo.

What you’ll do:

• Manage and run recurring operational maintenance tasks like monthly patching, tool monitoring reporting, user access revies, and cloud compliance efforts

• Provide email and instant messaging support for critical tool alerts and queries

• Provide security tool operational support - upkeep, tool monitoring, identifying security agent coverage, troubleshooting issues with security agents, checking logs and system logs

• Continuously expands knowledge regarding the company infrastructure and user requirements

• Security Incident response and handling like Log4J security event, patching critical systems, change management process, using ITSM tools for proper tracking, top notch documentation for on call guide

• System, and tool infrastructure upgrade, asset patching with minimal outages and proper documentation

• RCA tracking for all security events, tool outages and other troubleshooting

• Endpoint detection and response - EDR Anti-malware Agents, Advanced threat protection, Data Loss Prevention

• Vulnerability Management - DC and cloud asset vulnerability patching and compliance

• Web Content Filtering - Seamless Internet protection, on-premises and cloud-based web proxies

• Network security - Web Application Firewall, Intrusion Prevention, network-based spyware, Anti-malware detection and blocking, AWS Guard Duty

• Threat Intelligence - Intelligence feeds from sources like Recorded Future, and threat detection - User Behavior Analysis and investigation

Who you are:

• Bachelor's or Master's degree in a related technical field; or equivalent related professional experience

• Relevant certification (e.g., Security+, Tier 1 CSP administration)

• Familiar with security audit and orchestration tools

• Understand the PCI environment, the various PCI-DSS standards and ensure compliance

• Understanding large, complex technical environments and can resolve operational issues within the system, also act on security configuration issues on various security tools

The total cash range for this position in Seattle is $69,000.00 to $96,500.00. Employees in this role have the potential to increase their pay up to $110,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.View our full list of benefits.

Expedia iscommittedto creating an inclusive workenvironmentwith a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.