Travel technology

10 Expedia security leaders

These ten current and former Expedia Group security leaders hold or held director and head information security roles, covering security and compliance, governance and risk, security architecture, security engineering, divisional security advising and attack surface management. A reader can learn how security leaders work at Expedia from people who have held the role.

10 professionals2 companiesData retrieved October 15, 2026

Professionals to explore

01—10
  1. Cathy Luders

    LinkedIn

    Experience: Former Global Director Cybersecurity · Expedia

    Former Global Director Cybersecurity at Expedia (June 2023 to June 2024), with a background in enterprise cyber risk management, compliance, CMMC and privacy, per the profile. Cathy Luders was Head of Cybersecurity at Van Andel Institute (2022–2023) and Sr. Manager, GRC and Privacy Program at Meritor (2021–2022).

  2. Daniel Reed

    LinkedIn

    Experience: Security Architecture Director at Expedia Group · Expedia Group

    Security Architecture Director at Expedia Group, a role listed from March 2020, with a headline naming Director, Product Security Architecture and secure-by-design strategy. Daniel Reed is also listed as Sr. Security Architect at Expedia Group (2020–2025) and was Web Application Security Architect at HomeAway.com (2017–2020).

  3. David Barnett

    LinkedIn

    Experience: Former Director Information Security and Compliance · Expedia Group

    Former Director Information Security and Compliance at Expedia Group (January 2016 to June 2020) in Bellevue, where the role led the global security strategy and compliance framework, overseeing multiple security and compliance teams. David Barnett was Director Information Security at Orbitz (2013–2016) and founded Umbra Security in 2020.

  4. Gabrielle Gustaf

    LinkedIn

    Experience: Former Information Security Governance Director · Expedia

    Former Information Security Governance Director (2011–2013) and Information Security Compliance Director (2007–2011) at Expedia. Gabrielle Gustaf describes developing and operating information security management systems, risk and supplier risk management, awareness training and compliance certification programs for two international corporations, and was C&E Compliance Director at Microsoft (2014–2015).

  5. Joseph Barrett

    LinkedIn

    Experience: Director of Engineering - Security and Technical Program Management · Expedia

    Director of Engineering - Security and Technical Program Management at Expedia since 2019, leading a security engineering team that provides centralized security services to block, detect and remediate attacks and protect information, per the profile. Joseph Barrett was Director Of Engineering - Expedia Partner Solutions (2018–2019).

  6. Kelley Lowery

    LinkedIn

    Experience: Former Director, Divisional Information Security Advisors · Expedia Group

    Former Director, Divisional Information Security Advisors at Expedia Group (July 2022 to March 2023), a team dedicated to senior technology leaders, per the profile. Kelley Lowery is now Director, Security Partner at Experian and was Senior Manager Content Security at The Walt Disney Company (2020–2022) and Senior Security Engineer at Capital One (2015–2019).

  7. Ravi R.

    LinkedIn

    Experience: Head of Technology and Information Security GRCP (Governance, Risk, Compliance, Privacy) · Expedia Group

    Head of Technology and Information Security GRCP (Governance, Risk, Compliance, Privacy) at Expedia Group since October 2025, based in Austin. Ravi R. was Head of Technology and Cybersecurity GRC at TransUnion (2022–2025), Head of Information Security GRC at Amazon (2020–2021) and Global Head of Technology and Security Risk Management (VP) at Visa (2015–2019).

  8. Satya Nayak

    LinkedIn

    Experience: Former Director of Cyber Security · Expedia

    Former Director of Cyber Security at Expedia (September 2018 to July 2021), with a headline describing information security planning, budgeting, engineering and operations leadership. Satya Nayak was Head of Security Engineering & Operations at Outreach (2021–2023) and has been a Cybersecurity Executive at Unisys since December 2023.

  9. Sean Jacobsen

    LinkedIn

    Experience: Former Director, Threat & Attack Surface Management · Expedia

    Former Director, Threat & Attack Surface Management at Expedia (December 2019 to July 2023) in Seattle, now Director, Global Attack Surface Management at Experian. Sean Jacobsen was Director, Cyber Technical (2019), Director of Technology, Cyber Governance (2013–2019) and Director of IT, Technical Operations (2012–2013) at Capital One.

Choose the right perspective

Pick a security and compliance or governance leader for questions about PCI, audits and risk programs, and a security architecture, engineering or attack surface leader for questions about protecting booking platforms and cloud infrastructure. Note who is current and who has moved on.

Questions to take into the conversation

  1. 01How does an online travel company run PCI compliance across many brands and payment flows?
  2. 02What goes into managing the external attack surface of a large travel platform?
  3. 03How do divisional security advisors work with engineering leaders at a technology company?

Reaching Expedia security leaders

How can I contact one of these Expedia security leaders?

Pick one of the 10 people on this page and choose "Book a paid call", or describe your project to find others. You offer a fee for a 15-minute call or a written answer, Instant Expert finds the person's work email and sends the invitation, and they decide whether to accept. The list covers 2 companies: Expedia and Expedia Group, based on profile data retrieved on October 15, 2026. Being listed here doesn't mean someone has agreed to take calls.

How much does it cost to reach Expedia security leaders?

You choose the offer, starting at $5 per person. The offer is what the person receives, and Instant Expert's fee is added on top, so a $100 offer costs you $125. The fee is 20% of what you pay. You're charged only when the person books the call or sends the answer.

What if they don't reply?

You pay nothing. Instant Expert sends follow-up reminders, and if the person hasn't booked or answered within 7 days, the request expires and any hold on your card is released. You can invite several of the 10 people on this list at once and cap your total spend, so you pay only for the ones who accept.

Can an AI agent ask one of these Expedia security leaders a question?

Yes. An agent with a USDC wallet on Base can ask one question without an Instant Expert account. It names the person, for example by the LinkedIn URL on this page, and pays per ask over x402 (HTTP 402). The person answers in writing or by voice note, and if nobody answers within 7 days, the payment goes back to the wallet automatically. x402 docs

About this directory

This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.

Request a correction or removal

Other perspectives in Travel technology