Principal Security Operations Lead (AI-Driven)

Expedia; Washington (Washington County); On-site; USD 231,000 - 324,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Employee Assistance Program

Wellness & travel reimbursement

Travel discounts

IATAN membership

Job summary

Expedia Group is seeking a Principal Analyst to lead security operations across its global environments. You will drive threat detection, incident response, and proactive defenses while shaping analytics, dashboards, and automation.

This role emphasizes collaboration with engineering, product, and platform teams to align security with business goals. The ideal candidate brings extensive security operations experience, strong SIEM/EDR skills, and a track record of data-driven improvements.

Qualifications

• Bachelor's degree in computer science, information security, engineering, or related field.
• Extensive experience in security operations, incident detection, investigation, and response.
• End-to-end monitoring, alerting, and incident handling across services or domains.
• Strong technical expertise in SIEM, EDR, log management, and analytics.
• Familiarity with AI-driven security tools and data-driven operational improvement.

Responsibilities

• Lead complex security analyses to detect, investigate, and respond to threats across Expedia Group environments.
• Design and standardize monitoring workflows, runbooks, and escalation paths to improve response speed and quality.
• Collaborate with engineering, incident management, and product teams to translate findings into remediation plans.
• Develop analytics, detections, dashboards, and reports for senior stakeholders.
• Provide technical leadership and mentorship in log management, alert tuning, and SOAR/SIEM usage.

Skills

Security operations

Incident response

Threat detection

AI/ML in security

Education

Bachelor's degree in CS/InfoSec

Tools

SIEM

EDR

Log management

Security analytics

Job description

Expedia Group is seeking a Principal Analyst to lead security operations across its global environments. You will drive threat detection, incident response, and proactive defenses while shaping analytics, dashboards, and automation.

This role emphasizes collaboration with engineering, product, and platform teams to align security with business goals. The ideal candidate brings extensive security operations experience, strong SIEM/EDR skills, and a track record of data-driven improvements.