Principal Product Security Engineer

Principal Product Security Engineer

Are you passionate about cloud and the technology needed to drive security? Do you love securing business critical applications, systems and services, including Privileged Identity Management, Intrusion Detection, Data Leakage Prevention, Web Content Filtering, Firewall Compliance, Vulnerability and Security Event Management? 

Expedia Security & Privacy is searching for a top-notch Product Security Engineer who thrives on working with development teams to secure their products across the software development lifecycle. This is a highly visible role that requires an understanding of our large, complex technical environment and has the ability to design/engineer simple, elegant technical security solutions.

What you’ll do:

• Design and Deployment of innovative security solutions

• In-depth experience with application security, especially web application

• Leading solutions development and complex technical deployments across cross-functional teams.

• Operating in and reviewing modern cloud technologies from providers such as AWS, Azure, and GCP.

• Write and contribute to project plans, author engineering level documentation, and develop detailed test plans.

• Collaborate with business and technical teams to solve complex problems

• Influence the engineering practices within and beyond the Affinity team

Who you are:

• Bachelors or Masters Degree in Cybersecurity, Information Security, or Computer Science with major in Cybersecurity or related technical field; or Equivalent related professional experience

• 10+ years of experience in security engineering and operations support services of a mission critical environment. 

• Hands on experience with AWS Cloud services like EC2, VPC, S3, IAM, CloudFormation and Lambda; relevant experience with AWS cloud security is highly preferred.

• Minimum 3 years of applied computer programming and/or scripting language experience (Java, Python, Perl, Ruby, C++ etc.)

• Knowledge and understanding of systems and/or network design principles and thorough understanding of security principles and technical architectures

• Ability to correlate and analyze log information, packet captures, security alerts, and artifacts

• Excellent organizational and communication skills

• Ability to thrive in a dynamic, collaborative, and fast paced environment.

• Strong interpersonal skills as well as strong problem-solving and analytical skills.

The total cash range for this position in Austin is $187,500 to $263,000. Employees in this role have the potential to increase their pay up to $300,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

The total cash range for this position in Seattle is $187,500.00 to $262,500.00. Employees in this role have the potential to increase their pay up to $300,000.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience.  Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership. View our full list of benefits. 

Expedia is committed to creating an inclusive work environment with a diverse workforce.   All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.