Senior Application Security Engineer – Shift-Left & AI-Driven

Expedia, Inc.; Seattle (WA); On-site; USD 146,000 - 205,000; Full time

Job summary

Expedia Group in Seattle is seeking an Application Security Engineer III to advance security across our software delivery lifecycle. You will embed security requirements from design through deployment, integrate and tune security tooling in CI/CD, and lead threat modeling and secure design reviews for new features and services.

You will collaborate with product, engineering, privacy, compliance, and infrastructure teams to strengthen remediation workflows and apply AI/ML security concepts to

Qualifications

• 5+ years of relevant professional experience in security engineering.
• Experience with modern CI/CD pipelines and cloud-native services.
• Hands-on with software supply chain security and SCA/DSA to protect open-source risk.

Responsibilities

• Embed security requirements across the SDLC from design through deployment.
• Operate and tune security tooling to reduce false positives and improve remediation.
• Collaborate with product, engineering, privacy, compliance, infrastructure, and security stakeholders.

Skills

CI/CD security tooling

SAST

DAST

SCA

Vulnerability management

Threat modeling

AI/ML security

Education

Bachelor's degree in Computer Science or related field

Tools

Qualys

Wiz

GHAS

Ox security

GitHub Actions

Jenkins

Spinnaker

Job description

Expedia Group in Seattle is seeking an Application Security Engineer III to advance security across our software delivery lifecycle. You will embed security requirements from design through deployment, integrate and tune security tooling in CI/CD, and lead threat modeling and secure design reviews for new features and services.

You will collaborate with product, engineering, privacy, compliance, and infrastructure teams to strengthen remediation workflows and apply AI/ML security concepts to