Cyber Threat Intelligence Analyst III

Expedia Group; Seattle (WA); On-site; USD 146,000 - 205,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Paid time off

Employee Assistance Program

Job summary

Expedia Group is hiring a seasoned Threat Intelligence Analyst to drive operational and tactical research across the threat landscape. You will assess threat impact with enterprise stakeholders and support mitigating decisions through actionable intelligence.

Join a global travel company and help secure our platforms by tracking campaigns, analyzing data, and translating findings into practical recommendations for technical and operational teams.

Qualifications

• Bachelor's or Master's degree in a related field or equivalent experience
• At least 4 years of cybersecurity experience including 2 years in threat intelligence
• Knowledge of the cyber threat intelligence lifecycle and analytic frameworks

Responsibilities

• Conduct operational and tactical research for stakeholders
• Assess threat impact with enterprise and functional teams
• Analyze data and trends to recommend actions to teams
• Develop expertise on platforms, threat vectors, and actors
• Apply cyberattack analysis and kill chain concepts to improve controls
• Conduct threat intel analysis including indicators, signatures, traffic, and malware
• Provide all-source threat intel and context to address gaps
• Identify high risk threats and monitor threats continuously
• Support supplier and supply chain risk efforts
• Improve threat intel practices and maintain playbooks
• Collaborate with senior analysts on campaigns and onboarding new analysts
• Participate in external threat intel communities

Skills

Threat intelligence

Analytic frameworks

Written communication

Cross-functional collaboration

Education

Bachelor's or Master's degree

Tools

MITRE ATT&CK

Diamond Model

Cyber kill chain

Job description

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

In This Role You Will

• Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.
• Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.
• Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.
• Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors in order to track cyber campaigns using internal and external data.
• Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.
• Conduct technical analysis on threat adversary exploits, to include indicator extraction, signature development, network traffic analysis, and malware analysis.
• Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.
• Identify high risk threats and perform continuous threat intelligence-based monitoring
• Support third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.
• Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.
• Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.
• Participate in external peer groups and information sharing communities to track cyber threats and trends.

Minimum Qualifications

• Bachelor's or Master's degree in a related field; or equivalent related professional experience
• At least 4 years of experience in cybersecurity, including at least 2 years focused on cyber threat intelligence
• Working knowledge of the cyber threat intelligence lifecycle and common analytic frameworks

such as MITRE ATT&CK, the Diamond Model, and the cyber kill chain

• Ability to align analysis with business requirements and translate technical findings into practical recommendations
• Curious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigor
• Ability to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the company
• Strong organizational skills and the ability to prioritize competing intelligence requirements
• Experience with cyber defense operations, security monitoring, or incident response
• Ability to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environment
• Demonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communication
• Strong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.

The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Benefits And Perks

Expedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership. Learn more about life at Expedia Group at https://careers.expediagroup.com/life.

Accommodation requests

Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.

About Expedia Group

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.

Important notice

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.

Equal Opportunity

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.