Cyber Security Architect — Cloud, AI and Data Lead

American Express Global Business Travel; Honolulu (HI); Presencial; USD 104.000 - 194.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible benefits

Travel perks

Learning & development

Descripción de la vacante

American Express Global Business Travel is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed designs, model threats, and translate findings into mitigation options that engineers can implement.

The role spans cloud, application, data security, AI governance, and supplier risk, partnering with product, engineering, and enterprise architecture to set secure patterns and reference architectures.

Formación

• 8+ years in cybersecurity, with meaningful time spent in a security architecture or senior security engineering role.
• Experience designing or reviewing architecture for cloud-based systems (AWS, Azure, GCP).
• Strong grounding in application security, network security, and IAM, incl. least-privilege and Zero Trust.

Responsabilidades

• Secure solution design and architecture review using structured threat modeling (e.g., STRIDE); translate findings into actionable mitigations.
• Set standards for cloud environments (AWS, Azure, GCP); govern IAM, encryption, and secrets management; design secure APIs and microservices.
• Assess integrations with travel suppliers and third parties; provide due diligence and define secure integration patterns.

Conocimientos

Cybersecurity architecture

Cloud security

Threat modeling

Identity and access management

Communication

Educación

Bachelor's degree in a related field

Descripción del empleo

American Express Global Business Travel is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed designs, model threats, and translate findings into mitigation options that engineers can implement.

The role spans cloud, application, data security, AI governance, and supplier risk, partnering with product, engineering, and enterprise architecture to set secure patterns and reference architectures.