Cyber Threat Intelligence Analyst III

Expedia Group; Seattle (WA); On-site; USD 146,000 - 205,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

Travel discounts

Wellness reimbursement

IATAN membership

Job summary

Expedia Group seeks a Threat Intelligence Analyst to conduct operational research and produce actionable intelligence for stakeholders across the organization. You will analyze threat data, track campaigns, and profile adversaries to support risk mitigation with clear, concise communication.

The role emphasizes collaboration with enterprise teams, maintaining expertise across platforms, and translating findings into practical recommendations for decision makers.

Qualifications

• Bachelor's or Master's degree in a related field or equivalent professional experience.
• At least 4 years of cybersecurity experience with focus on threat intelligence.
• Knowledge of MITRE ATT&CK, Diamond Model, and the cyber kill chain.
• Ability to translate technical findings into practical recommendations for stakeholders.
• Excellent written and verbal communication; capable of briefing technical and non-technical audiences.

Responsibilities

• Conduct operational and tactical threat intelligence research for stakeholders.
• Analyze data and trends in threat landscape to inform decisions.
• Track cyber campaigns and profile advanced adversaries using intel.
• Develop expertise across platforms, threat vectors, and actors.
• Apply kill chain concepts to improve mitigating controls.
• Collaborate with peer teams to address gaps and inform action.
• Identify high-risk threats and monitor continuously.
• Support third-party supplier and supply chain risk efforts with reporting.

Skills

Cyber threat intelligence

MITRE ATT&CK

Diamond Model

Cyber kill chain

Threat analysis

Communication skills

Cross-functional collaboration

Education

Bachelor's or Master's degree in a related field

Job description

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.In this role you will:Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors in order to track cyber campaigns using internal and external data.Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.Conduct technical analysis on threat adversary exploits, to include indicator extraction, signature development, network traffic analysis, and malware analysis.Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.Identify high risk threats and perform continuous threat intelligence-based monitoringSupport third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.Participate in external peer groups and information sharing communities to track cyber threats and trends.Minimum Qualifications:Bachelor's or Master's degree in a related field; or equivalent related professional experienceAt least 4 years of experience in cybersecurity, including at least 2 years focused on cyber threat intelligenceWorking knowledge of the cyber threat intelligence lifecycle and common analytic frameworkssuch as MITRE ATT&CK, the Diamond Model, and the cyber kill chainAbility to align analysis with business requirements and translate technical findings into practical recommendationsCurious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigorAbility to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the companyStrong organizational skills and the ability to prioritize competing intelligence requirementsExperience with cyber defense operations, security monitoring, or incident responseAbility to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environmentDemonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communicationStrong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.Benefits and perksExpedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership. Learn more about life at Expedia Group at https://careers.expediagroup.com/life .Accommodation requestsExpedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation .About Expedia GroupExpedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.Important noticeEmployment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/ .Equal OpportunityExpedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.