Lead Cyber Security Architect – Cloud & AI Security

American Express Global Business Travel; Boise (ID); Vor Ort; USD 104.000 - 194.000; Vollzeit

Benefits dieser Stelle

Discretionary annual bonus

Zusammenfassung

Amex GBT in the United States is seeking a Cyber Security Architect to embed security into how we design and build technology, reviewing designs, modeling threats, and translating findings into practical mitigations for engineering teams.

You will set cloud security standards (AWS, Azure, GCP), guide API design, protect traveler and payment data (PCI DSS), and partner with product, engineering, and enterprise architecture to balance risk and speed.

Qualifikationen

• 8+ years in cybersecurity
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP)
• Strong grounding in application security, network security, and IAM, including least-privilege and Zero Trust principles
• Experience applying threat modeling methodologies and translating findings into practical design changes
• Working knowledge of regulations and standards such as PCI DSS, GDPR, or ISO 27001
• Ability to translate technical risk into terms non-technical stakeholders can act on and influence decisions
• Bachelor's degree in a related field, or equivalent experience

Aufgaben

• Review designs for new products, platforms, and major changes using structured threat modeling to find risks, gaps, and single points of failure
• Turn findings into actionable recommendations that balance risk, cost, and delivery timelines
• Own the review process, define “secure enough” at each design stage, and produce reference architectures and reusable patterns
• Set standards for cloud environments (AWS, Azure, GCP), including segmentation, workload isolation, IAM, encryption, and secrets management
• Guide secure API and microservices design, including authentication, authorization, and rate limiting
• Protect traveler and payment data across its lifecycle (including PCI DSS flows), championing privacy-by-design and data minimization
• Assess integrations with airlines, hotels, GDSs, payment processors, and other travel suppliers
• Support technical due diligence for new vendors, partnerships, and acquisitions
• Define secure integration patterns for fast supplier onboarding without compromising standards
• Review AI/ML implementations before launch, assessing risks like prompt injection and data leakage
• Define guardrails and agentic AI patterns, including permissions, workflows, audit trails, and logging
• Set standards for model provenance and versioning, vet third-party model providers
• Define identity standards for AI agents and non-human accounts
• Assess risks of AI agents impersonating users or misusing tokens
• Set authorization boundaries for AI agents involved in provisioning or access reviews
• Maintain and evolve security architecture standards and guardrails
• Align decisions with frameworks (NIST CSF, ISO 27001, PCI DSS, GDPR, SOC 2)
• Partner with Cyber Defense to feed incident lessons and mentor engineers and junior architects

Ausbildung

Bachelor's degree in a related field

Jobbeschreibung

Amex GBT in the United States is seeking a Cyber Security Architect to embed security into how we design and build technology, reviewing designs, modeling threats, and translating findings into practical mitigations for engineering teams.

You will set cloud security standards (AWS, Azure, GCP), guide API design, protect traveler and payment data (PCI DSS), and partner with product, engineering, and enterprise architecture to balance risk and speed.