Cyber Threat Intelligence Analyst III

In this role you will

• Conduct operational and tactical research to produce and disseminate timely, actionable, relevant intelligence for stakeholders and decision makers.
• Work with enterprise stakeholders and functional teams to assess the impact of threats and risks and support mitigation decisions.
• Analyze data and trends in an evolving cyber threat landscape and recommend courses of action to technical and operational teams.
• Develop and maintain expertise in a variety of technology platforms, threat vectors, and threat actors in order to track cyber campaigns using internal and external data.
• Apply knowledge of cyberattack analysis and cyber kill chain framework to improve mitigating controls and profile advanced threat adversaries.
• Conduct technical analysis on threat adversary exploits, to include indicator extraction, signature development, network traffic analysis, and malware analysis.
• Partner with peer teams by providing all-source threat intelligence and analysis, context, and reasoning to address gaps and inform appropriate action.
• Identify high risk threats and perform continuous threat intelligence-based monitoring
• Support third-party supplier and supply chain risk efforts by researching and reporting on supplier-related threat activity.
• Recommend improvements to current threat intelligence practices and procedures, and help maintain team documentation and playbooks.
• Collaborate with senior analysts on long-running campaign and threat actor tracking, and support the onboarding and development of newer analysts.
• Participate in external peer groups and information sharing communities to track cyber threats and trends.

Minimum Qualifications

• Bachelor's or Master's degree in a related field; or equivalent related professional experience
• At least 4 years of experience in cybersecurity, including at least 2 years focused on cyber threat intelligence
• Working knowledge of the cyber threat intelligence lifecycle and common analytic frameworks such as MITRE ATT&CK, the Diamond Model, and the cyber kill chain
• Ability to align analysis with business requirements and translate technical findings into practical recommendations
• Curious, analytical thinker with sound threat intelligence tradecraft and a commitment to analytic rigor
• Ability to articulate information security concepts clearly to technical peers and non-technical partners while accurately portraying real risks and threats to the company
• Strong organizational skills and the ability to prioritize competing intelligence requirements
• Experience with cyber defense operations, security monitoring, or incident response
• Ability to work effectively cross-functionally with colleagues of diverse cultures in a global and virtual environment
• Demonstrated experience conducting threat intelligence analysis, with working knowledge of application and network security, and a track record of teamwork, customer focus, and clear communication
• Strong written and verbal communication skills, including the ability to write concise finished intelligence products for a range of audiences.

Additional information

The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Pay and benefits

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual's knowledge, skills, and experience. Pay ranges may be modified in the future.

Benefits and perks

Expedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership.