Penetration Tester/Ethical Hacker

As a Penetration Tester, you will be a key member of our cybersecurity team responsible for identifying and mitigating security vulnerabilities in our systems, applications, and infrastructure. You will use your expertise in ethical hacking to simulate real-world cyberattacks and help strengthen our defenses against potential threats. Your role is essential in ensuring the security and resilience of our technology assets.

If you are passionate about cybersecurity, have a keen eye for identifying vulnerabilities, and enjoy working in a challenging and rewarding environment, we invite you to apply for the penetration testing position and become a vital part of our offensive security team. Help us ensure the security and resilience of our travel products and services while supporting ethical hacking within our bug bounty program.

What you’ll do:

• Collaborates with team members to co-develop and solve security problems

• Triage bug bounty issues and execute web/network penetration testing

• Reaches out proactively to meet peers across environment and collaborate to solve problems

• Takes advantage of opportunities to build new technical expertise in a specific security area

• Seeks knowledge from subject matter experts when needed

• Helps coordinate stakeholder input and collaboration efforts when developing solutions to issues

• Thinks broadly and understand how, why and when policies/processes are standardized and when they differ across the organization

• Executes tasks and/or provides data to support implementation of holistic security solutions that forge linkages between structure, people, process and technology

• Reports clearly on current work status. Asks challenging questions when empowered to do so

• Performs routine information security development responsibilities, following standard policies and procedures; reports more difficult issues to senior associates

Who you are:

• Bachelor’s or Master’s degree; or equivalent related professional experience

• Technical degree preferred; industry recognized security certifications

• 2+ years for Bachelor’s or equivalent Security certification

• 1+ years for Master’s or equivalent Security certification

• Performed penetration test in context of security vulnerabilities

• Demonstrated strength in offensive security

• Proven experience in vulnerability triage and security assessment, preferably in a bug bounty or responsible disclosure program

• Understand security testing and monitoring tools

• Has the ability to identify and remediate OWASP Top 10 or related vulnerabilities. Strong knowledge of web application security, network security, and common security vulnerabilities (e.g., OWASP Top Ten)

• Familiar with various testing methodologies and tools used by security researchers

• Excellent analytical and problem-solving skills with attention to detail

• Effective communication skills for collaboration with internal and external stakeholders

• Knowledge of programming languages and web technologies is a plus but not mandatory

• Relevant certifications, such as (OSCP) or Certified Ethical Hacker (CEH), are advantageous but not mandatory

The total cash range for this position in Austin is $105,500 to $148,000. Employees in this role have the potential to increase their pay up to $169,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

The total cash range for this position in Chicago is $97,000 to $135,500. Employees in this role have the potential to increase their pay up to $155,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.View our full list of benefits.