Security Analyst II

Full-time - Mid Level

Hybrid - Seattle, WA

Administrative and Support Services

About the position

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success. The Expedia Technology Security and Privacy team works across the company's many groups and products to deliver security solutions to ensure Expedia customers can trust the Expedia brand. You will shape the future of Expedia by bringing a blend of strategy and security management competencies to ensure attack surface reduction. This role is unique and inherently cross-functional - you will collaborate across the multiple teams that develop and run our platform. The Security Analyst II, Attack Surface Management will work on a team of Security Analysts and Senior Security Engineers. You are an experienced security analyst, capable of supporting the security and privacy domain programs. You will be key to the delivery of measurable security outcomes. You will prepare analysis for Expedia development and infrastructure teams in support of Baseline Security.

Responsibilities

• Leverage analysis of security data to develop insights and create trusted vulnerability and risk reporting that meets user requirements.
• Recognize and stay apprised of emerging technology trends and best practices that could potentially benefit the organization.
• Investigate a range of issues or incidents by gathering and analyzing information, documenting insights and findings on the underlying cause, circumstances, and contributing factors, and suggesting necessary actions for resolution.
• Effectively identify issues with the quality and performance of products, services, solutions or processes and proposes improvements.
• Possess knowledge of features and facilities for integration, and communication among applications, databases, and technology platforms to bring together different components and form a fully functional solution to a business problem.
• Facilitate collaboration with different stakeholders with varied perspectives to develop effective solutions to issues.
• Apply knowledge and expertise to complex asset management assignments and projects; assists with the development of business area's asset management standards and procedures.
• Provide data to quickly reveal the root cause of problems, and analyze problems all the way to successful resolutions.
• Use knowledge and experience to perform complex platform assessments and assignments in context of security; assists with policy and procedure development.
• Evaluate trends and results of security investigations and outcomes to proactively tune security technology to force active prevention of security threats to the outermost layer of our infrastructure wherever possible.
• Review outcomes of security investigations and compares expected prevention steps to actuals and modifies configuration of security controls to bring prevention further to the edge.
• May design and implement custom software, scripts, policies, extensions, or APIs to support the identification and prevention of information security threats.
• May conduct interoperability assessments on information security controls to limit friction caused to the end user, developer, analyst, and customer communities.
• Ensure that information security controls are not in conflict and designs and implements solutions where tooling may overlap.
• May assist in incident remediation activities by participating in incident response process and adjusting existing or implementing new information security controls to address discovered vulnerabilities or defensive gaps in the detective and preventative control stack live and in real time.

Requirements

• 3+ years of experience
• Relevant security certification (e.g., SSCP, CISSP, CCSK, AWS, or others)
• Experience with physical security system design and configuration
• Experience with configuration, deployment, and operation of information security systems, both on-premises and cloud-based - EKS, ECS, RDDS, Kubernetes, Docker, NodeJS and others
• Familiarity with multiple technologies or languages such as Python, Java, SQL, and others
• Ability to explain technology choices to technical and non-technical observers
• Experience in mentoring other analysts
• Familiarity with engineering sensitive systems in support of security operations
• Experience providing assessments and recommendations to technology teams and offers guidance to more junior security engineering individual contributors
• Familiarity with multi-cloud environments (AWS, GCP and Azure)
• Experience with Container security and vulnerability management a plus
• Experience with GitHub and GitHub Advanced Security a plus.

Benefits

• Exciting travel perks
• Generous time-off
• Parental leave
• Global hybrid work setup
• Career development resources