Expedia

Overview

Risk Intelligence and Orchestration is redefining vulnerability management at Expedia Group through AI-driven risk intelligence, security orchestration, and automation. In this role, you will own security risk decisions and exploitability prioritization across cloud, application, and infrastructure environments.

About Expedia

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.

Requirements & Eligibility

• Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
• 5+ years of relevant professional experience
• Strong ability to interpret vulnerability, exploit, and threat data across cloud, application, identity, and infrastructure layers.
• Experience producing executive-level security narratives, risk summaries, and metric-based insights.
• Working knowledge of cloud platforms, modern application architectures, and enterprise security tooling.

Key Responsibilities

• Own security risk decisions and exploitability prioritization across cloud, application, and infrastructure environments, translating vulnerability and threat signals into clear, actionable outcomes.
• Evaluate critical and high-risk findings, applying SLA governance, escalation judgment, and exploitability, blast radius, recurrence patterns, and business impact.
• Analyze vulnerability, threat intelligence, and exposure data to determine real-world outcomes.
• Produce leadership-ready narratives and metrics (MTTR, recurrence, exception debt, aging vulnerabilities) that communicate risk posture, trends, and program effectiveness.
• Lead and support risk campaigns, including go/no-go decisions, prioritization logic, and stakeholders to influence risk outcomes and drive alignment.
• Partner closely with threat intelligence, cloud security, product security, and engineering improvements back into tooling, workflows, and policy.
• Participate in an on-call rotation to provide expert risk assessment, decision support, and guidance during active incidents, emerging threats, or time-sensitive security events.