# Application Security Engineer III

Hiring organization: [Expedia Group](https://career.thegoodapps.co/organizations/expedia-group)

Canonical page: https://career.thegoodapps.co/jobs/3b76aba4-c305-490c-965d-ef9c1b03cd7b

Listed on Expedia Group's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Senior
- Location: Seattle, WA
- Salary: 146000 – 204500 USD per year

## Summary

This role focuses on embedding security directly into Expedia's development processes rather than adding it afterward, managing security tools across CI/CD pipelines, and helping engineers ship faster without compromising protection. It suits experienced security engineers who want to bridge development and security teams and have hands-on expertise with modern tooling and cloud practices.

_Our summary, not Expedia Group's wording._

## Skills named

GitHub Actions, Java, Jenkins, Python, Qualys, Spinnaker

## Required

- Bachelor's degree in Computer Science or related technical field, or equivalent professional experience
- 5+ years of professional experience in security
- Application security, product security, DevSecOps, or security engineering experience with modern CI/CD pipelines and cloud-native services
- Practical experience with software supply chain security including SBOMs, signing, attestation, and secure build pipelines
- Experience operating and tuning vulnerability management platforms and integrating them with CI/CD pipelines and developer workflows
- Proficiency in modern programming languages such as Java or Python for security automation

## Nice to have

- Experience applying AI/ML and agentic AI to vulnerability management and triage workflows
- Familiarity with AI-driven security tools and understanding of AI/ML security implications like OWASP LLM Top 10
- Track record enabling developers on secure practices and influencing secure engineering decisions
- Strong communication skills for complex security topics across technical and non-technical audiences
- Proven success reducing vulnerability backlogs and improving remediation SLAs through automation and data-driven improvements

Apply on Expedia Group's site: https://expedia.wd108.myworkdayjobs.com/en-US/search/job/Washington---Seattle-Campus/Security-Engineering-III_R-108485-1