Senior Cyber Security Architect: Cloud, AI & Risk

American Express Global Business Travel; Salt Lake City (UT); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning opportunities

Job summary

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across global travel platforms. You will review designs, model threats, and translate findings into actionable mitigations for engineering teams.

The role sits at the intersection of engineering, risk management, and security, partnering with product, engineering, and enterprise architecture to establish reusable security patterns and reference architectures while balancing risk and speed.

Qualifications

• 8+ years in cybersecurity; security architecture or senior security engineering role.
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP).
• Strong grounding in application security, network security, IAM and Zero Trust; risk-based design.

Responsibilities

• Secure solution design and architecture review across new products and major changes.
• Set standards for cloud environments (AWS, Azure, GCP) and secure integrations.
• Assess third-party and supplier risk and define secure integration patterns.
• Review AI/ML implementations for security risks and governance.
• Define identity standards for AI agents and non-human accounts.

Skills

Security architecture

Threat modeling

Cloud security

Identity and access management

Regulatory standards

Non-technical stakeholder comms

AI/ML security governance

Education

Bachelor's degree in a related field

Job description

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across global travel platforms. You will review designs, model threats, and translate findings into actionable mitigations for engineering teams.

The role sits at the intersection of engineering, risk management, and security, partnering with product, engineering, and enterprise architecture to establish reusable security patterns and reference architectures while balancing risk and speed.