Cyber Security Architect — Cloud, AI & Data Security

American Express Global Business Travel; Montpelier (VT); Vor Ort; USD 104.000 - 194.000; Vollzeit

Benefits dieser Stelle

Flexible benefits

Travel perks

Learning & development

Zusammenfassung

Amex Global Business Travel is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, model threats, and translate findings into mitigations for engineering teams.

The role sits at the intersection of engineering, risk management, and travel tech operations, partnering with product, engineering, and EA teams to build reusable security patterns and reference architectures.

Qualifikationen

• 8+ years in cybersecurity with security architecture or senior security engineering experience.
• Hands-on experience designing or reviewing cloud-based architectures (AWS, Azure or GCP).
• Strong knowledge of PCI DSS, GDPR or ISO 27001 and secure design practices.
• Ability to translate risk into actionable design changes for engineers and executives.
• Bachelor's degree or equivalent experience in a related field.

Aufgaben

• Embed security into product design and architecture reviews across platforms.
• Perform structured threat modeling and produce mitigation options for engineering teams.
• Define secure standards for cloud environments and data protection throughout lifecycle.
• Assess third-party integrations and guide secure supplier onboarding.
• Review AI/ML implementations for security risks and governance.

Kenntnisse

8+ years cybersecurity

Security architecture

Cloud security (AWS/Azure/GCP)

Threat modeling (STRIDE)

Identity and access management

Data protection / PCI DSS

Security reviews / risk assessment

Communication with engineers & execs

Ausbildung

Bachelor's degree in a related field or equivalent experience

Tools

AWS

Azure

GCP

DevSecOps tooling

Jobbeschreibung

Amex Global Business Travel is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, model threats, and translate findings into mitigations for engineering teams.

The role sits at the intersection of engineering, risk management, and travel tech operations, partnering with product, engineering, and EA teams to build reusable security patterns and reference architectures.