Senior AI & API Security Architect — Secure SDLC Lead

American Express; United States; Remote; USD 161,000 - 242,000; Full time

Benefits offered by this job

Health and welfare insurance plans

Retirement programs

Parental leave

Job summary

Amex GBT is seeking a Senior Application Security Architect with a deep specialization in AI and API security in the United Kingdom. You will guide engineering teams on secure software architecture across applications, APIs, and AI/agentic systems, and work hands-on to implement secure designs including OAuth2.0, OpenID Connect, and gateway configurations.

You will lead threat modeling and secure design reviews, partner with cross-functional teams to define governance, and drive secure adoption

Qualifications

• 10+ years of experience in software engineering, application security, or security architecture.
• Deep API- and AI-specific security expertise and secure SDLC knowledge.
• Experience with OAuth2.0, OpenID Connect, JWT/JOSE and API gateway architectures.

Responsibilities

• Serve as a senior application security architect with a focus on API and AI/agentic systems.
• Guide engineering teams in selecting architecture patterns and tradeoffs (REST/GraphQL/gRPC, synchronous vs event-driven).
• Educate teams on security, scalability, and maintainability of designs.
• Partner with development teams to implement secure architectures including authentication/authorization and gateway configs.
• Assess and secure existing implementations with SAST/DAST/SCA and API/AI gateways.
• Lead threat modeling and secure design reviews across apps, APIs, AI/ML services, and agentic systems.
• Develop governance standards for design and responsible AI usage.

Skills

APIs security

OAuth2.0

OpenID Connect

JWT/JOSE

Kubernetes

Cloud platforms

AI security

Threat modeling

Go

Java

Python

Cryptography

Communication

Leadership

Education

Bachelor's degree in Computer Science/Engineering

Advanced degree (M.Sc./Ph.D.) in CS/AI or related field

Tools

API gateways

Service mesh

Kubernetes

Job description

Amex GBT is seeking a Senior Application Security Architect with a deep specialization in AI and API security in the United Kingdom. You will guide engineering teams on secure software architecture across applications, APIs, and AI/agentic systems, and work hands-on to implement secure designs including OAuth2.0, OpenID Connect, and gateway configurations.

You will lead threat modeling and secure design reviews, partner with cross-functional teams to define governance, and drive secure adoption