Senior AI & API Security Architect

American Express Global Business Travel; United States Virgin Islands; On-site; USD 148,000 - 228,000; Full time

Benefits offered by this job

Flexible benefits

Learning & development access

Inclusion Groups

Job summary

American Express Global Business Travel is seeking a Senior Application Security Architect with a deep focus on AI and API security. You will guide engineering teams on secure SDLC practices, assess existing implementations, and lead threat modeling across applications and AI/ML services.

The role emphasizes practical, hands-on security in a cloud-native environment with Kubernetes and major cloud providers.

Qualifications

• 10+ years in software engineering, security architecture, or security leadership.
• Strong fundamentals in secure SDLC, OWASP Top 10, and vulnerability management.
• Deep API security expertise including OAuth 2.0, OpenID Connect, JWT/Jose.
• Hands-on with cloud-native stacks and Kubernetes across AWS/Azure/GCP.
• Experience with AI-native and agentic development tooling and governance.

Responsibilities

• Lead secure SDLC and architecture decisions for API and AI systems.
• Guide teams on architecture tradeoffs and secure design patterns.
• Collaborate on authentication, authorization, and API gateway configurations.
• Perform threat modeling and secure design reviews across systems.
• Mentor engineers in cryptography, secure coding, and policy creation.
• Represent security in governance and industry-standard initiatives.

Skills

Application security

API security

AI security

Cloud-native

Kubernetes

OAuth 2.0/OpenID Connect

JWT/JOSE

Threat modeling

Go/Java/Python

Education

Bachelor’s degree in CS/Engineering or related

Tools

API gateways

AI gateways

SAST/DAST/SCA

Job description

American Express Global Business Travel is seeking a Senior Application Security Architect with a deep focus on AI and API security. You will guide engineering teams on secure SDLC practices, assess existing implementations, and lead threat modeling across applications and AI/ML services.

The role emphasizes practical, hands-on security in a cloud-native environment with Kubernetes and major cloud providers.