Director, Enterprise Security Engineering

Traveltechessentialist; San Jose (CA); On-site; USD 249,000 - 348,500; Full time

Benefits offered by this job

Medical, dental, and vision

Paid time off

Employee Assistance Program

Wellness and travel reimbursement

Travel discounts

IATAN membership

Job summary

Expedia Group is seeking a Director of Security Engineering to lead hands‑on, architecture‑driven security across cloud, AI, and service mesh domains. You will drive scalable security platforms, guardrails, and policy implementations that integrate into high‑velocity engineering workflows.

You will mentor teams, shape security strategy, and partner with AI, platform, and product teams to deliver measurable security outcomes across a global travel technology platform.

Qualifications

• 15+ years of cybersecurity experience in enterprise-scale security
• Deep AWS expertise: IAM, VPC, GuardDuty, Security Hub, Macie, Inspector, Control Tower, Secrets Manager, KMS
• Proven SDLC security architecture across large engineering orgs with CI/CD integration
• Hands-on service mesh security: mTLS, workload identity, zero-trust enforcement
• Proven AI security experience including governance for LLM apps, RAG systems, and pipelines
• Experience running CSPM and DSPM programs with measurable posture improvements
• Excellent collaboration with engineering teams and ability to translate security into actionable design
• Strong technical communication and security guidance documentation

Responsibilities

• Design, build, and operate reusable security platforms and reference architectures
• Deliver guardrails for infrastructure-as-code, containers, and service mesh
• Implement and maintain secrets management, certificate lifecycle, and workload identity frameworks
• Lead security tooling integrations and ensure high signal quality and developer usability
• Embed security into AI development lifecycle and influence model deployment practices
• Operate AWS security controls at enterprise scale and improve CSPM/DSPM coverage
• SDLC security architecture across pipelines, tooling, and runtime protections
• Collaborate with engineers to balance security and delivery priorities

Skills

Security engineering

Cloud security

Zero-trust

AI security

Security architecture

Threat modeling

CI/CD security

Security governance

Education

Bachelor's degree in CS/InfoSec

Tools

SAST

DAST

SCA

OWASP

NIST

Istio/Envoy

Job description

Expedia Group is seeking a Director of Security Engineering to lead hands‑on, architecture‑driven security across cloud, AI, and service mesh domains. You will drive scalable security platforms, guardrails, and policy implementations that integrate into high‑velocity engineering workflows.

You will mentor teams, shape security strategy, and partner with AI, platform, and product teams to deliver measurable security outcomes across a global travel technology platform.