Senior Cyber Security Architect - Cloud & AI Security

American Express Global Business Travel; Austin (TX); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning opportunities

Job summary

American Express Global Business Travel is seeking a Cyber Security Architect to weave security into every phase of product design and delivery. You will partner with product, engineering, and enterprise architecture teams to craft reusable security patterns and guardrails while balancing risk, speed, and cost.

You will review AI/ML implementations and non-human agent identities, ensuring privacy-by-design and robust identity security.

Qualifications

• 8+ years in cybersecurity with security architecture or senior security engineering experience.
• Experience designing or reviewing architecture for cloud-based systems (AWS, Azure, GCP).
• Strong grounding in app, network security, and IAM with least-privilege and zero-trust principles.
• Experience applying threat modeling methodologies and translating findings into practical design changes.
• Familiar with PCI DSS, GDPR, ISO 27001 and related regulations and standards.
• Ability to translate technical risk into terms non-technical stakeholders can act on.
• Bachelor's degree or equivalent experience.

Responsibilities

• Secure solution design and architecture review using structured threat modeling to find risks.
• Define secure patterns, reference architectures, and guardrails for engineering teams.
• Assess cloud environments and data protection, including PCI DSS flows and privacy-by-design.

Skills

Security architecture

Cloud security

Threat modeling

Identity & access management

Regulatory awareness

Influence without authority

Education

Bachelor's degree in a related field

Tools

CISSP

SABSA

TOGAF

CCSP

Job description

American Express Global Business Travel is seeking a Cyber Security Architect to weave security into every phase of product design and delivery. You will partner with product, engineering, and enterprise architecture teams to craft reusable security patterns and guardrails while balancing risk, speed, and cost.

You will review AI/ML implementations and non-human agent identities, ensuring privacy-by-design and robust identity security.