Cyber Security Architect: Cloud & AI Security Leader

American Express Global Business Travel; City of Albany (NY); On-site; USD 104,000 - 194,000; Full time

Job summary

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, model threats, and translate findings into actionable mitigations that engineering teams can implement.

This role sits at the intersection of engineering, risk management, and privacy, shaping secure travel technology from day one. You will define secure patterns, standards for cloud environments (AWS, Azure, GCP), and guardrails for AI, data, and

Qualifications

• 8+ years in cybersecurity, with meaningful time spent in a security architecture or senior security engineering role.
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP).
• Strong grounding in application security, network security, and identity and access management, including least-privilege and Zero Trust principles.
• Experience applying threat modeling methodologies and translating findings into practical design changes.
• Working knowledge of standards such as PCI DSS, GDPR, or ISO 27001.
• Demonstrated ability to translate technical risk into terms non-technical stakeholders can act on and influence decisions.

Responsibilities

• Secure solution design and architecture review across products, platforms, and major changes using threat modeling.
• Set standards for cloud environments, IAM, encryption, and data protection practices.
• Assess third-party integrations and support technical due diligence for vendors and acquisitions.
• Define secure integration patterns for rapid onboarding without compromising standards.
• Mentor engineers and junior architects on secure design and governance.

Skills

Security architecture

Threat modeling

Cloud security

Regulatory knowledge

Communication and influence

Education

Bachelor's degree or equivalent

Job description

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, model threats, and translate findings into actionable mitigations that engineering teams can implement.

This role sits at the intersection of engineering, risk management, and privacy, shaping secure travel technology from day one. You will define secure patterns, standards for cloud environments (AWS, Azure, GCP), and guardrails for AI, data, and