Principal Security Engineer: AI, Zero-Trust & Cloud Security

Expedia; San Jose (CA); On-site; USD 249,000 - 349,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Wellness and travel reimbursement

Travel discounts

IATAN membership

Job summary

Expedia Group is seeking a Principal Security Engineer who ships—hands-on, scale-focused. You will design and build security platforms, embed controls into high-velocity engineering workflows, and lead cloud security programs across multi-cloud environments.

You will collaborate with product security and AI platform teams, implement zero-trust, mTLS, CSPM/DSPM, and ensure secure software delivery while maintaining developer usability and measurable security outcomes.

Qualifications

• Extensive hands-on cybersecurity experience in enterprise-scale environments.
• Experience delivering SDLC security architecture across large engineering teams.
• Proven ability to translate security requirements into practical engineering designs.

Responsibilities

• Design, build, and operationalize reusable security platforms and reference architectures.
• Implement zero-trust security models and mTLS across distributed microservices.
• Lead AWS security controls, CSPM/DSPM, and security observability at scale.
• Collaborate with AI platform teams to secure AI/LLM deployments.

Skills

15+ years of cybersecurity experience

Hands-on AWS expertise

Service mesh security / zero-trust

CI/CD security integration

AI security in production

Security architecture at scale

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Istio

Envoy

SAST/DAST/SCA

CI/CD tooling

Job description

Expedia Group is seeking a Principal Security Engineer who ships—hands-on, scale-focused. You will design and build security platforms, embed controls into high-velocity engineering workflows, and lead cloud security programs across multi-cloud environments.

You will collaborate with product security and AI platform teams, implement zero-trust, mTLS, CSPM/DSPM, and ensure secure software delivery while maintaining developer usability and measurable security outcomes.