Cyber Security Architect: Secure Design & Cloud Risk

American Express Global Business Travel; Annapolis (MD); Vor Ort; USD 104.000 - 194.000; Vollzeit

Benefits dieser Stelle

Flexible benefits

Travel perks

Learning platform

Inclusion groups

Zusammenfassung

Amex GBT is seeking a Cyber Security Architect to embed security into product and platform design from the start. You will review solutions across the business, apply threat modeling, and translate findings into actionable mitigations for engineering teams.

The role spans cloud, data, and AI security, with responsibilities to set standards, guide API/microservice security, and ensure privacy-by-design across travel systems and payments.

Qualifikationen

• 8+ years in cybersecurity with architecture/senior engineering exposure.
• Experience designing or reviewing cloud-based architectures (AWS, Azure, or GCP).
• Strong knowledge of PCI DSS, GDPR, ISO 27001 and risk-based security controls.

Aufgaben

• Review designs for new products and major changes using structured threat modeling to identify risks and gaps.
• Define secure patterns and reference architectures; own the review process and enforce security at design stages.
• Set standards for cloud environments (AWS, Azure, GCP) and IAM, encryption, and secrets management.
• Assess third-party integrations and perform vendor due diligence to maintain security posture.
• Oversee AI security architecture, governance, and risk mitigation throughout the lifecycle.

Kenntnisse

Cybersecurity

Threat modeling

Cloud security

IAM / Zero Trust

PCI DSS

GDPR

ISO 27001

Regulatory standards

Ausbildung

Bachelor's degree or equivalent

Tools

AWS

Azure

GCP

Jobbeschreibung

Amex GBT is seeking a Cyber Security Architect to embed security into product and platform design from the start. You will review solutions across the business, apply threat modeling, and translate findings into actionable mitigations for engineering teams.

The role spans cloud, data, and AI security, with responsibilities to set standards, guide API/microservice security, and ensure privacy-by-design across travel systems and payments.