View my profile

Security Engineer II - Security Engineering (Hotwire - San Francisco)

United States - California - San Francisco


About Us:

Launched in 2000 in San Francisco, Hotwire is one of the earliest innovators in the online travel arena. Just a few years later in 2003, we joined the Expedia Group family of brands that includes, HomeAway, Travelocity and more.

Our roots are here in San Francisco, but we also have offices in Seattle along with an important and fast-growing product and technology presence in Gurgaon, India. Hotwire has the energy and pace of a startup, plus the stability and backing of the incredible Expedia family of companies. Hotwire’s culture centers around delivering value to customers and supply partners by being passionate about building great products with the latest and greatest technologies available. We pride ourselves on our organizational transparency, a bias for action and a customer-centric approach to everything we do.

Hotwire differentiates itself as a brand within the travel marketplace by offering a unique a core value proposition for customers and suppliers with our opaque pricing model. This concept revolves around offering great bargains on hotel room nights without sharing the specific name or location of the hotel until the booking is complete. By giving this flexibility to our suppliers, we can offer great value to our customers. Hotwire also offers a full retail suite of other travel products that can fulfill virtually any customer travel need.

We’re currently making substantial investments in our technology platform and our brand marketing strategy to enable our next stage of high growth. To make these endeavors possible, we’re on the hunt for people who are passionate about solving tough problems and are excited about the opportunity take on highly visible roles that will have an immediate impact on our business.

If you thrive in environments that are dynamic, action-oriented, data-driven and relish in conquering diverse challenges every single day, joining Hotwire is likely to be the most rewarding opportunity of your career. So-- what are you waiting for? Come join a household name brand that lives at the exciting intersection of technology and travel.

About the Role:

This Security Engineer II at Hotwire provides security expertise in the analysis, assessment, development, and evaluation of security solutions for applications, operating systems, databases, and networks. Additionally, you are a key contributor to the development of security requirements; conduct security design, compliance and risk assessments; review and document information security policies and procedure; and evaluate vendors, security services, and technologies.

If you enjoy analyzing systems, networks, applications and vendor services from a security perspective, and you are skilled at discovering security issues that appear under new threat scenarios, this position will provide you with a challenging opportunity. The security engineering role requires hands-on technical assessment of the threat landscape in terms of its potential impact and recommending strategic, mitigating actions and developing solutions.


  • You develop, handle and consult on the technical architecture and strategies for enterprise security controls, and compliance impacts.
  • You implement security design patterns, standards, specifications, procedures & practices.
  • You provide security consulting to other tech and business teams.
  • You lead and influence multi-disciplinary teams in implementing and operating security controls.
  • You review projects and provide security standards to the technology, prescribing appropriate protection configurations that will balance business requirements with enterprise technology standards to arrive at the optimal solution.
  • You stay current on emerging security threats, vulnerabilities, and controls, as well as extrapolate to the Expedia enterprise application and business landscape.
  • You translate business requirements into security and technical actions, and you communicate security risks to different audiences ranging from business leaders to engineers.
  • You contribute to the development of security strategy.
  • You develop new detective and investigative capabilities using current technical solutions.
  • You are responsible for identifying continuous security capability improvements that will help protect our computing environments.
  • You participate in incident handling and cross-team coordination.

Required Skills & Experience:

  • Bachelor’s degree in related area required. Master's degree preferred.
  • Minimum of 5 years of IT Security and/or security engineering experience.
  • Experience in designing and implementing design patterns, standards, specifications, and procedures.
  • Proven project management experience, including developing project plans, schedules, and budgets.
  • Extensive knowledge of industry-accepted information security best practices, standards, and policies.
  • Demonstrated ability to take initiative and accountability for achieving results.
  • Experience as a team leader operating in a critical role that greatly impacts team success.
  • Strong interpersonal, oral, and written communication skills.
  • Knowledge of network and web related technologies and protocols.
  • Strong application development and scripting skills.
  • Experience with the application of threat modeling or other risk identification techniques.
  • Skilled in discussing complex security issues in understandable business terms.
  • Experience with enforcing security policies and standards with business owners leading by influence.
  • Very detailed knowledge of system security vulnerabilities and remediation techniques.
  • Experience in enforcing regulatory controls (e.g. PCI, SOX, GDPR, GLBA, etc.).
  • Security certification desired (e.g., CISSP, GIAC, CEH, etc.).
  • Critical Analysis: Identify and understand issues, problems and opportunities; compare data from different sources to draw conclusions.

Why Join Us:

Expedia Group recognizes our success is dependent on the success of our people. We are the world's travel platform, made up of the most knowledgeable, passionate, and creative people in our business. Our brands recognize the power of travel to break down barriers and make people's lives better – that responsibility inspires us to be the place where exceptional people want to do their best work, and to provide them to tools to do so.

Whether you're applying to work in engineering or customer support, marketing or lodging supply, at Expedia Group we act as one team, working towards a common goal; to bring the world within reach. We relentlessly strive for better, but not at the cost of the customer. We act with humility and optimism, respecting ideas big and small. We value diversity and voices of all volumes. We are a global organization but keep our feet on the ground so we can act fast and stay simple. Our teams also have the chance to give back on a local level and make a difference through our corporate social responsibility program, Expedia Cares.


Expedia is committed to creating an inclusive work environment with a diverse workforce.   All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.


Job Category
Technology Group

Job Function

United States - California - San Francisco

Job Type
Full-Time Regular

Similar Jobs

Go to top