Cyber Security Architect: Cloud, AI & Risk

American Express Global Business Travel; United States; On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Travel perks

Comprehensive learning platform access

Inclusion Groups and supportive perks

Job summary

Amex GBT seeks a Cyber Security Architect to embed security into design and build processes across cloud, data, and applications. You will review architectures, model threats, and translate risks into actionable design patterns while ensuring compliance with PCI, GDPR, ISO 27001 and other standards.

You’ll lead secure integration patterns, guide API security, and champion privacy‑by‑design while collaborating with security and engineering teams to deliver secure traveler experiences.

Qualifications

• 8+ years in cybersecurity with architecture/security engineering focus
• Experience designing/reviewing cloud architectures (AWS/Azure/GCP)
• Strong knowledge of application, network, and IAM security including least-privilege/zero-trust
• Experience applying threat modeling to design changes
• Familiarity with PCI DSS, GDPR, ISO 27001
• Bachelor’s degree or equivalent; relevant certifications such as CISSP/SABSA/TOGAF/CCSP/Microsoft Cloud certs
• Experience supporting due diligence for M&A or vendor integrations
• DevSecOps and CI/CD security; AI/ML security considerations

Responsibilities

• Secure solution design and architecture review
• Review designs for new products and major changes using threat modeling to find risks and gaps
• Turn findings into actionable recommendations balancing risk, cost and delivery timelines
• Own the review process and produce reference architectures and reusable patterns
• Define secure integration patterns for fast supplier onboarding
• Guide secure API/microservices design including authentication/authorization/rate limiting
• Assess AI/ML implementations for prompt injection and data leakage
• Define guardrails for AI agents including scoped permissions and audit trails
• Align architecture decisions with frameworks (NIST, ISO, PCI, GDPR, SOC 2)
• Mentor engineers and junior architects on secure design

Skills

Security architecture

Cloud security

Threat modeling

Risk communication

Identity & access management

DevSecOps

AI/ML security

Security governance

Security design reviews

Education

Bachelor’s degree or equivalent

Security certifications (CISSP/SABSA/TOGAF/CCSP)

Job description

Amex GBT seeks a Cyber Security Architect to embed security into design and build processes across cloud, data, and applications. You will review architectures, model threats, and translate risks into actionable design patterns while ensuring compliance with PCI, GDPR, ISO 27001 and other standards.

You’ll lead secure integration patterns, guide API security, and champion privacy‑by‑design while collaborating with security and engineering teams to deliver secure traveler experiences.