Travel technology
10 Expedia security leaders
These ten current and former Expedia Group security leaders hold or held director and head information security roles, covering security and compliance, governance and risk, security architecture, security engineering, divisional security advising and attack surface management. A reader can learn how security leaders work at Expedia from people who have held the role.
Professionals to explore
01—10Cathy Luders
LinkedInExperience: Former Global Director Cybersecurity · Expedia
Former Global Director Cybersecurity at Expedia (June 2023 to June 2024), with a background in enterprise cyber risk management, compliance, CMMC and privacy, per the profile. Cathy Luders was Head of Cybersecurity at Van Andel Institute (2022–2023) and Sr. Manager, GRC and Privacy Program at Meritor (2021–2022).
Daniel Reed
LinkedInExperience: Security Architecture Director at Expedia Group · Expedia Group
Security Architecture Director at Expedia Group, a role listed from March 2020, with a headline naming Director, Product Security Architecture and secure-by-design strategy. Daniel Reed is also listed as Sr. Security Architect at Expedia Group (2020–2025) and was Web Application Security Architect at HomeAway.com (2017–2020).
David Barnett
LinkedInExperience: Former Director Information Security and Compliance · Expedia Group
Former Director Information Security and Compliance at Expedia Group (January 2016 to June 2020) in Bellevue, where the role led the global security strategy and compliance framework, overseeing multiple security and compliance teams. David Barnett was Director Information Security at Orbitz (2013–2016) and founded Umbra Security in 2020.
Gabrielle Gustaf
LinkedInExperience: Former Information Security Governance Director · Expedia
Former Information Security Governance Director (2011–2013) and Information Security Compliance Director (2007–2011) at Expedia. Gabrielle Gustaf describes developing and operating information security management systems, risk and supplier risk management, awareness training and compliance certification programs for two international corporations, and was C&E Compliance Director at Microsoft (2014–2015).
Joseph Barrett
LinkedInExperience: Director of Engineering - Security and Technical Program Management · Expedia
Director of Engineering - Security and Technical Program Management at Expedia since 2019, leading a security engineering team that provides centralized security services to block, detect and remediate attacks and protect information, per the profile. Joseph Barrett was Director Of Engineering - Expedia Partner Solutions (2018–2019).
Kelley Lowery
LinkedInExperience: Former Director, Divisional Information Security Advisors · Expedia Group
Former Director, Divisional Information Security Advisors at Expedia Group (July 2022 to March 2023), a team dedicated to senior technology leaders, per the profile. Kelley Lowery is now Director, Security Partner at Experian and was Senior Manager Content Security at The Walt Disney Company (2020–2022) and Senior Security Engineer at Capital One (2015–2019).
Ravi R.
LinkedInExperience: Head of Technology and Information Security GRCP (Governance, Risk, Compliance, Privacy) · Expedia Group
Head of Technology and Information Security GRCP (Governance, Risk, Compliance, Privacy) at Expedia Group since October 2025, based in Austin. Ravi R. was Head of Technology and Cybersecurity GRC at TransUnion (2022–2025), Head of Information Security GRC at Amazon (2020–2021) and Global Head of Technology and Security Risk Management (VP) at Visa (2015–2019).
Satya Nayak
LinkedInExperience: Former Director of Cyber Security · Expedia
Former Director of Cyber Security at Expedia (September 2018 to July 2021), with a headline describing information security planning, budgeting, engineering and operations leadership. Satya Nayak was Head of Security Engineering & Operations at Outreach (2021–2023) and has been a Cybersecurity Executive at Unisys since December 2023.
Sean Jacobsen
LinkedInExperience: Former Director, Threat & Attack Surface Management · Expedia
Former Director, Threat & Attack Surface Management at Expedia (December 2019 to July 2023) in Seattle, now Director, Global Attack Surface Management at Experian. Sean Jacobsen was Director, Cyber Technical (2019), Director of Technology, Cyber Governance (2013–2019) and Director of IT, Technical Operations (2012–2013) at Capital One.
Choose the right perspective
Pick a security and compliance or governance leader for questions about PCI, audits and risk programs, and a security architecture, engineering or attack surface leader for questions about protecting booking platforms and cloud infrastructure. Note who is current and who has moved on.
Questions to take into the conversation
- 01How does an online travel company run PCI compliance across many brands and payment flows?
- 02What goes into managing the external attack surface of a large travel platform?
- 03How do divisional security advisors work with engineering leaders at a technology company?
Reaching Expedia security leaders
How can I contact one of these Expedia security leaders?
Pick one of the 10 people on this page and choose "Book a paid call", or describe your project to find others. You offer a fee for a 15-minute call or a written answer, Instant Expert finds the person's work email and sends the invitation, and they decide whether to accept. The list covers 2 companies: Expedia and Expedia Group, based on profile data retrieved on October 15, 2026. Being listed here doesn't mean someone has agreed to take calls.
How much does it cost to reach Expedia security leaders?
You choose the offer, starting at $5 per person. The offer is what the person receives, and Instant Expert's fee is added on top, so a $100 offer costs you $125. The fee is 20% of what you pay. You're charged only when the person books the call or sends the answer.
What if they don't reply?
You pay nothing. Instant Expert sends follow-up reminders, and if the person hasn't booked or answered within 7 days, the request expires and any hold on your card is released. You can invite several of the 10 people on this list at once and cap your total spend, so you pay only for the ones who accept.
Can an AI agent ask one of these Expedia security leaders a question?
Yes. An agent with a USDC wallet on Base can ask one question without an Instant Expert account. It names the person, for example by the LinkedIn URL on this page, and pays per ask over x402 (HTTP 402). The person answers in writing or by voice note, and if nobody answers within 7 days, the payment goes back to the wallet automatically. x402 docs
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal