Cyber Threat Intelligence Analyst III

11105 Expedia, Inc.; Seattle (WA); On-site; USD 146,000 - 205,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Employee Assistance Program

Wellness and travel reimbursement

Travel discounts

IATAN membership

Job summary

Expedia Group is seeking a cybersecurity threat intelligence analyst in Seattle to produce timely, actionable intelligence for stakeholders. You will assess threat impacts with enterprise teams, analyze trends in a dynamic threat landscape, and track campaigns across multiple platforms.

The role emphasizes translating findings into practical actions for technical and operational teams. The position requires 4+ years in cybersecurity with at least 2 years in threat intelligence, strong analytic

Qualifications

• Bachelor's or Master's degree in a related field; or equivalent related professional experience.
• At least 4 years of cybersecurity experience, including at least 2 years focused on cyber threat intelligence.
• Working knowledge of the cyber threat intelligence lifecycle and common analytic frameworks such as MITRE ATT&CK, the Diamond Model, and the cyber kill chain
• Ability to align analysis with business requirements and translate technical findings into practical recommendations
• Curious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigor
• Ability to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the company
• Strong organizational skills and the ability to prioritize competing intelligence requirements
• Experience with cyber defense operations, security monitoring, or incident response
• Ability to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environment
• Demonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communication
• Strong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.

Responsibilities

• Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.
• Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.
• Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.
• Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors to track cyber campaigns using internal and external data.
• Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.
• Conduct technical analysis on threat adversary exploits, including indicator extraction, signature development, network traffic analysis, and malware analysis.
• Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.
• Identify high risk threats and perform continuous threat intelligence-based monitoring
• Support third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.
• Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.
• Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.
• Participate in external peer groups and information sharing communities to track cyber threats and trends.

Skills

Threat intelligence

Cyber threat analysis

MITRE ATT&CK

Diamond Model

Cyber kill chain

Analytical thinking

Cross-functional collaboration

Communication

Threat hunting

Situational awareness

Education

Bachelor's or Master's degree in a related field

Equivalent professional experience

Tools

MITRE ATT&CK

Diamond Model

Cyber kill chain

Job description

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business. Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

In this role you will:

• Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.
• Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.
• Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.
• Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors in order to track cyber campaigns using internal and external data.
• Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.
• Conduct technical analysis on threat adversary exploits, to include indicator extraction, signature development, network traffic analysis, and malware analysis.
• Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.
• Identify high risk threats and perform continuous threat intelligence-based monitoring
• Support third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.
• Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.
• Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.
• Participate in external peer groups and information sharing communities to track cyber threats and trends.

Minimum Qualifications:

• Bachelor's or Master's degree in a related field; or equivalent related professional experience
• At least 4 years of experience in cybersecurity, including at least 2 years focused on cyber threat intelligence
• Working knowledge of the cyber threat intelligence lifecycle and common analytic frameworks such as MITRE ATT&CK, the Diamond Model, and the cyber kill chain
• Ability to align analysis with business requirements and translate technical findings into practical recommendations
• Curious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigor
• Ability to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the company
• Strong organizational skills and the ability to prioritize competing intelligence requirements
• Experience with cyber defense operations, security monitoring, or incident response
• Ability to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environment
• Demonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communication
• Strong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.

The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual's knowledge, skills, and experience. Pay ranges may be modified in the future.

Benefits and perks

• medical coverage
• dental coverage
• vision coverage
• paid time off
• an Employee Assistance Program
• wellness and travel reimbursement
• travel discounts
• International Airlines Travel Agent Network (IATAN) membership

Learn more about life at Expedia Group at https://careers.expediagroup.com/life.

Accommodation requests

Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.

About Expedia Group

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.

Important notice

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law.

This employer participates in E-Verify.

The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.

Expedia Group (NASDAQ: EXPE) powers travel for everyone, everywhere through our global platform. Driven by the core belief that travel is a force for good, we help people experience the world in new ways and build lasting connections. We provide industry-leading technology solutions to fuel partner growth and success, while facilitating memorable experiences for travelers. Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™.

The official website to find and apply for job openings at Expedia Group is lifeatexpediagroup.com/jobs.