Architecting Secure Cloud, AI & Data Systems

CW Government Travel; United States; Vor Ort; USD 100.000 - 180.000; Vollzeit

Zusammenfassung

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology, not add it afterwards. You’ll review proposed solutions, perform threat modeling, and translate findings into clear, actionable mitigations that engineering teams can implement.

This role sits at the intersection of engineering, risk management, and the realities of running global travel technology: booking platforms, payment flows, and data protection.

Aufgaben

• Review designs for new products, platforms, and major changes using structured threat modeling to find risks, gaps, and single points of failure
• Turn findings into actionable recommendations that balance risk, cost, and delivery timelines
• Own the review process and produce reference architectures and reusable patterns
• Guide secure API and microservices design, including authentication, authorization, and rate limiting
• Protect traveler and payment data across its lifecycle, championing privacy-by-design and data minimization with Privacy and Data Security Investigations teams
• Assess integrations with airlines, hotels, GDSs, payment processors, and other travel suppliers
• Define secure integration patterns for fast supplier onboarding without compromising standards
• Review AI/ML implementations before launch, assessing risks like prompt injection and data leakage
• Define guardrails for AI agents, including permissions, audit trails, and model provenance
• Align architecture decisions with frameworks and regulations (NIST CSF, ISO 27001, PCI DSS, GDPR, SOC 2)

Jobbeschreibung

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology, not add it afterwards. You’ll review proposed solutions, perform threat modeling, and translate findings into clear, actionable mitigations that engineering teams can implement.

This role sits at the intersection of engineering, risk management, and the realities of running global travel technology: booking platforms, payment flows, and data protection.