Security Analyst I

Monitor and respond to security alerts and incidents across Expedia Group environments. Analyze logs and vulnerability findings to identify true positives and recommend remediation, while collaborating with technical teams to document and communicate incident status.

• Monitor, triage, and respond to security alerts and incidents
• Analyze security logs/event data and vulnerability findings
• Execute access reviews, endpoint protection checks, and vulnerability follow-up
• Collaborate to document security issues and communicate incident summaries
• Apply system design/API/data model knowledge to investigate anomalous behavior

Core work includes security monitoring, triage, incident handling using runbooks/playbooks, SIEM-driven event analysis, and supporting vulnerability management workflows. The role also requires foundational understanding of system design, APIs, and data models and applying AI/ML concepts in security operations.

The ideal candidate is an early-career security professional with hands-on experience monitoring security alerts and supporting incident response workflows. They have practical exposure to SIEM, endpoint protection, IDS/IPS, log analysis, and vulnerability management, plus foundational understanding of APIs, system design, and data modeling. They can communicate incident summaries clearly and apply basic AI/ML concepts to improve security operations.