Senior Cyber Security Architect: Cloud, AI & Risk

American Express Global Business Travel; Nashville (TN); On-site; USD 104,000 - 194,000; Full time

Job summary

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across our global travel platforms. You’ll review proposals, model threats, and translate findings into actionable mitigations for engineering teams.

You’ll partner with product, engineering, and enterprise architecture from the earliest design conversations, building reusable security patterns and serving as the trusted authority on risk versus speed.

Qualifications

• 8+ years in cybersecurity in architecture or security engineering.
• Experience designing or reviewing cloud-based architectures (AWS/Azure/GCP).
• Strong grounding in application, network security and IAM including least-privilege & zero-trust.
• Familiar with PCI DSS, GDPR or ISO 27001 regulations.
• Bachelor's degree or equivalent experience.

Responsibilities

• Secure solution design and architecture review with threat modeling.
• Define secure patterns, reference architectures and guardrails.
• Set cloud security standards for IAM, encryption, and secrets management.
• Assess third-party integrations and vendor security risk.
• Evaluate AI/ML security implications and governance.

Skills

Threat modeling

Security architecture

Cloud security

IAM / Zero Trust

PCI DSS / GDPR

Influence without authority

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across our global travel platforms. You’ll review proposals, model threats, and translate findings into actionable mitigations for engineering teams.

You’ll partner with product, engineering, and enterprise architecture from the earliest design conversations, building reusable security patterns and serving as the trusted authority on risk versus speed.