Security Engineer III - Threat Detection

Expedia Group; Gurugram District; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Expedia Group in India is seeking a security engineering professional to design, implement, and maintain scalable security controls across platforms, applications, and infrastructure. You will focus on automating security tasks and partnering with engineering teams to embed secure-by-design patterns.

The role requires 5+ years in security, strong data parsing skills (Splunk, KQL, Elastic), and experience with SIEM/EDR, Python scripting, and cloud-native security.

Qualifications

• Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
• 5+ years of relevant professional experience.
• Strong ability to parse data using tools like Splunk SPL, Kusto (KQL), or Elastic/YARA.
• Deep understanding of how hackers operate using the MITRE framework.
• Experience with Python or similar scripting languages to automate security tasks.
• Experience in central monitoring platforms like SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response).
• Proficiency with authentication/authorization, encryption, network and application security, vulnerability management and security monitoring.

Responsibilities

• Design, implement, and maintain security controls, tools, and services that protect Expedia Group platforms, applications, and infrastructure, with a focus on scalable, automated solutions.
• Perform security design and low-level design reviews, including API design and data modeling, to identify and mitigate vulnerabilities across services and systems.
• Lead and execute security assessments, threat modeling, and vulnerability remediation in partnership with engineering teams, driving secure-by-design patterns across multiple domains.
• Build and enhance security monitoring, detection, and response capabilities, using data-driven analysis to improve signal quality, reduce noise, and strengthen incident response.
• Collaborate with product, platform, and infrastructure teams to embed security into CI/CD pipelines and development workflows, including safely integrating and operating AI/ML‑enabled solutions that improve outcomes.
• Drive security best practices, standards, and education across teams, enabling engineers to deliver features quickly and safely while maintaining Expedia Group’s security posture and regulatory commitments.

Skills

Splunk SPL

Kusto (KQL)

Elastic/YARA

Python

SIEM

EDR

MITRE ATT&CK

API security

Education

BSc in CS or related

Tools

SIEM platforms

Endpoint Security (EDR)

Job description

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

Introduction To The Team

We are part of the Cyber defense organisation, focused on detecting, analyzing and responding to security threats across the enterprise. Our mission is to proactively identify adversary behavior, strengthen detection capabilities and improve overall security posture.

In This Role, You Will

• Design, implement, and maintain security controls, tools, and services that protect Expedia Group platforms, applications, and infrastructure, with a focus on scalable, automated solutions.
• Perform security design and low-level design reviews, including API design and data modeling, to identify and mitigate vulnerabilities across services and systems.
• Lead and execute security assessments, threat modeling, and vulnerability remediation in partnership with engineering teams, driving secure-by-design patterns across multiple domains.
• Build and enhance security monitoring, detection, and response capabilities, using data-driven analysis to improve signal quality, reduce noise, and strengthen incident response.
• Collaborate with product, platform, and infrastructure teams to embed security into CI/CD pipelines and development workflows, including safely integrating and operating AI/ML‑enabled solutions that improve outcomes.
• Drive security best practices, standards, and education across teams, enabling engineers to deliver features quickly and safely while maintaining Expedia Group’s security posture and regulatory commitments.

Minimum Qualifications

Experience and Qualifications

• Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
• 5+ years of relevant professional experience.
• Strong ability to parse data using tools like Splunk SPL, Kusto (KQL), or Elastic/YARA
• Deep understanding of how hackers operate using the MITRE framework
• Experience with Python or similar scripting languages to automate security tasks
• Experience in central monitoring platforms like SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response).
• Proficiency with common security concepts and technologies such as authentication and authorization, encryption, network and application security, vulnerability management, and security monitoring.

Preferred Qualifications

• Experience designing and operating security services or frameworks at scale in a cloud-native environment, including automation of security guardrails and controls across multiple domains.
• Demonstrated ability to influence architecture and design for security across distributed systems, including driving secure patterns for APIs, data models, and low-level designs.
• Strong background in building or improving security detection, incident response workflows, and metrics, using data to continuously refine coverage, reduce false positives, and improve time to detect and respond.
• Safely integrates and operates AI/ML‑enabled solutions that improve outcomes, such as detection tuning, anomaly identification, or intelligent triage, while managing associated security and privacy risks.
• Familiarity with AI-driven systems, tools, or workflows and practical experience applying AI/ML concepts to enhance or secure real world products and platforms.

Accommodation requests

Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.

About Expedia Group

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.

Important notice

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.

Equal Opportunity

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.