Senior Cyber Security Architect – Cloud & AI Security

American Express Global Business Travel; Helena (MT); Vor Ort; USD 104.000 - 194.000; Vollzeit

Benefits dieser Stelle

Flexible benefits

Travel perks

Learning platform access

Inclusion groups

Zusammenfassung

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, identify risks through threat modeling, and translate findings into clear mitigation options for engineering teams.

The role sits at the intersection of engineering, risk management, and travel technology, shaping reusable security patterns and reference architectures while partnering with product, engineering, and enterprise teams from the earliest design

Qualifikationen

• 8+ years in cybersecurity, with meaningful time spent in a security architecture or senior security engineering role.
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP).
• Strong grounding in application security, network security, and identity and access management, including least-privilege and Zero Trust principles.
• Experience applying threat modeling methodologies and translating findings into practical design changes.
• Working knowledge of relevant regulations and standards, such as PCI DSS, GDPR, or ISO 27001.
• Demonstrated ability to translate technical risk into terms non-technical stakeholders can act on and to influence decisions without direct authority.
• A bachelor's degree in a related field, or equivalent experience.

Aufgaben

• Review designs for new products, platforms, and major changes using structured threat modeling (e.g., STRIDE) to find risks, gaps, and single points of failure.
• Turn findings into actionable recommendations that balance risk, cost, and delivery timelines.
• Own the review process, define “secure enough” at each design stage, and produce reference architectures and reusable patterns.
• Set standards for cloud environments (AWS, Azure, GCP), including segmentation, workload isolation, IAM (least-privilege, zero-trust), encryption, and secrets management.
• Guide secure API and microservices design, including authentication, authorization, and rate limiting.
• Protect traveler and payment data across its lifecycle (including PCI DSS flows), championing privacy-by-design and data minimization with Privacy and Data Security Investigations teams.
• Assess integrations with airlines, hotels, GDSs (Sabre, Amadeus, Travelport), payment processors, and other travel suppliers.
• Support technical due diligence for new vendors, partnerships, and acquisitions.
• Define secure integration patterns for fast supplier onboarding without compromising standards.
• Review AI/ML implementations before launch, assessing risks like prompt injection, output data leakage, and over-permissioned agents.
• Define identity standards for AI agents and non-human accounts, including unique agent identities, least-privilege access, and credential lifecycle management.
• Assess risks specific to AI agents authenticating or acting on behalf of users, such as impersonation and token misuse.
• Set authorization boundaries for AI agents involved in provisioning, deprovisioning, or access reviews.
• Maintain and evolve security architecture standards, guardrails, and design principles, creating reusable frameworks that improve the quality and speed of engineering output across teams.
• Align architecture decisions with frameworks and regulations (NIST CSF, ISO 27001, PCI DSS, GDPR, SOC 2) and translate technical risk and trade-offs into terms that engineering, product, and executive stakeholders can act on.
• Partner with the Cyber Defense team to feed incident lessons and threat intelligence into architecture decisions, and mentor engineers and junior architects on secure design.

Kenntnisse

Security architecture

Threat modeling

Cloud security

Regulatory knowledge

Risk communication

Ausbildung

Bachelor's degree or equivalent

Tools

PCI DSS

IAM

Jobbeschreibung

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology. You will review proposed solutions, identify risks through threat modeling, and translate findings into clear mitigation options for engineering teams.

The role sits at the intersection of engineering, risk management, and travel technology, shaping reusable security patterns and reference architectures while partnering with product, engineering, and enterprise teams from the earliest design