Cyber Threat Intelligence Analyst III

Expedia Group•Seattle, WA

1d•$146,000 - $204,500•Remote

About The Position

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business. In this role you will do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

Requirements

Bachelor's or Master's degree in a related field; or equivalent related professional experience
At least 4 years of experience in cybersecurity, including at least 2 years focused on cyber threat intelligence
Working knowledge of the cyber threat intelligence lifecycle and common analytic frameworks such as MITRE ATT&CK, the Diamond Model, and the cyber kill chain
Ability to align analysis with business requirements and translate technical findings into practical recommendations
Curious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigor
Ability to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the company
Strong organizational skills and the ability to prioritize competing intelligence requirements
Experience with cyber defense operations, security monitoring, or incident response
Ability to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environment
Demonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communication
Strong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.

Responsibilities

Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.
Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.
Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.
Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors in order to track cyber campaigns using internal and external data.
Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.
Conduct technical analysis on threat adversary exploits, to include indicator extraction, signature development, network traffic analysis, and malware analysis.
Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.
Identify high risk threats and perform continuous threat intelligence-based monitoring.
Support third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.
Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.
Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.
Participate in external peer groups and information sharing communities to track cyber threats and trends.