Senior Cyber Security Architect: Cloud, AI & Data Protection

American Express Global Business Travel; Bismarck (ND); On-site; USD 104,000 - 194,000; Full time

Job summary

Amex GBT in the United States is seeking a Cyber Security Architect to embed security into the design and build of travel technology. You will review solutions, perform threat modeling, and translate findings into actionable mitigations for engineering teams.

You'll partner with product, engineering, and enterprise architecture, build reusable security patterns, and set standards across cloud, API, data, and identity security to protect traveler data and payment flows.

Qualifications

• 8+ years in cybersecurity with architecture or senior security engineering experience.
• Hands-on design or review of cloud-based architectures (AWS, Azure, GCP).
• Strong knowledge of application security, network security, and IAM concepts (least privilege, zero trust).
• Experience threat modeling and translating findings into design changes.
• Familiarity with PCI DSS, GDPR, ISO 27001.
• Ability to communicate risk to non-technical stakeholders and influence decisions.

Responsibilities

• Review designs for new products using threat modeling to find risks and gaps.
• Set security standards for cloud environments (AWS, Azure, GCP) including IAM and encryption.
• Assess third-party integrations and conduct due diligence for vendors.
• Review AI/ML implementations for prompt injection and data leakage.
• Define identity standards and credential lifecycle for AI agents.
• Maintain security architecture standards and align with frameworks like NIST/ISO.

Skills

Security architecture

Cloud security

Threat modeling

Regulatory awareness

Education

Bachelor's degree or equivalent

Tools

AWS

Azure

GCP

Job description

Amex GBT in the United States is seeking a Cyber Security Architect to embed security into the design and build of travel technology. You will review solutions, perform threat modeling, and translate findings into actionable mitigations for engineering teams.

You'll partner with product, engineering, and enterprise architecture, build reusable security patterns, and set standards across cloud, API, data, and identity security to protect traveler data and payment flows.