Principal Security Operations Analyst — AI-Driven Defense Leader

Expedia, Inc.; Seattle (WA); On-site; USD 231,000 - 324,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Employee Assistance Program

Wellness and travel reimbursement

Travel discounts

IATAN membership

Job summary

Expedia Group is seeking a Principal Analyst in Security Operations to lead advanced security analyses and orchestration across its global environments, including threat detection and incident response. You will design scalable dashboards, runbooks, and workflows, enabling faster, more precise responses while mentoring a diverse team of security engineers.

The role emphasizes collaboration with engineering and product teams to translate findings into actionable roadmaps and measurements of risk

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or related technical field, or equivalent practical experience in security operations.
• Extensive experience in security operations, including hands-on incident detection, investigation, and response across large-scale or complex environments.
• Proven ownership of security operations across multiple services or domains, including responsibility for end-to-end monitoring, alerting, and incident handling processes.
• Strong technical expertise in security tooling and infrastructure such as SIEM, EDR, log management, and security analytics platforms, and in interpreting complex telemetry for threat detection.
• Familiarity with AI-driven systems, tools, or workflows in a security context, and the ability to work effectively with data, detections, and automation to improve operational outcomes.

Responsibilities

• Lead complex security operations analyses to detect, investigate, and respond to sophisticated threats across Expedia Group's environments, driving clear, measurable risk reduction.
• Design, optimize, and standardize security monitoring and incident response workflows, including runbooks, playbooks, and escalation paths, to improve speed, quality, and consistency of response.
• Partner with engineering, incident management, and product teams to translate security findings into actionable technical requirements and remediation plans, influencing roadmaps across multiple domains.
• Develop and maintain advanced analytics, detections, dashboards, and reporting that provide deep visibility into security posture, threat trends, and operational performance for senior stakeholders.
• Provide technical leadership and mentorship across global security operations, shaping best practices for log management, alert tuning, investigation techniques, and use of SOAR/SIEM and related tooling.
• Safely integrate and operate AI/ML-enabled solutions that improve detection, triage, and response outcomes, building familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world security operations scenarios.

Skills

Security operations

Incident detection

Investigation

Response coordination

SIEM

EDR

Log management

AI/ML in security

Mentorship

Education

Bachelor’s degree in computer science or related field

Tools

SIEM

EDR

Log management

Security analytics platforms

Job description

Expedia Group is seeking a Principal Analyst in Security Operations to lead advanced security analyses and orchestration across its global environments, including threat detection and incident response. You will design scalable dashboards, runbooks, and workflows, enabling faster, more precise responses while mentoring a diverse team of security engineers.

The role emphasizes collaboration with engineering and product teams to translate findings into actionable roadmaps and measurements of risk