Senior Product Security Architect

Jobtailor; California (MO); On-site; USD 180,000 - 240,000; Full time

Job summary

Expedia Group is seeking an Senior Product Security Architect to act as a trusted advisor across product, engineering, and platform teams. The role focuses on secure, highly available, and privacy-aware products, leveraging AI across security practices.

You will lead threat modeling and security assessments, embedding security in roadmaps and delivery while applying AI to improve CI/CD and security controls. Mentorship and strategy contributions are key.

Qualifications

• Bachelor's degree in Computer Science or related technical field or equivalent experience.
• 10+ years of product security and development experience.
• Experience performing application threat modeling and architecture reviews.
• Experience applying Generative AI in software development at an enterprise level.

Responsibilities

• Serve as a trusted product security architecture advisor to product, engineering, and platform teams.
• Lead threat modeling and security assessments for new and evolving products and platforms.
• Embed security requirements into product roadmaps, design reviews, and delivery processes.
• Provide thought leadership on AI in the Product Security org.
• Scale AI-enabled security tooling and best practices across the org.
• Drive continuous verification of product security controls via AI-enabled automation.
• Communicate complex security trade-offs to technical and non-technical stakeholders.
• Mentor product managers, engineers, and architects to raise security literacy.
• Contribute to Expedia Group security strategy and identify emerging risks and trends.
• Foster a culture of learning, data-driven decisions, and improvements.
• Collaborate across IT and Information Security for end-to-end product lifecycle coverage.

Skills

Product Security Architecture

Threat Modeling

Generative AI in software

CI/CD Practices

Architecture Reviews

Education

Bachelor's degree in Computer Science or related field

Tools

AI-Enabled Security Tooling

SDKs

Context Engineering

MCPs

Authorization mechanisms

Job description

• Serve as a trusted product security architecture advisor to product, engineering, and platform teams, helping them design secure, highly available, and privacy-aware products and services.
• Lead and facilitate threat modeling and security assessments for new and evolving products, services, and platforms, translating findings into clear, actionable recommendations.
• Partner closely with product and engineering leaders to embed security requirements into product roadmaps, design reviews, and delivery processes without slowing down innovation.
• Provide thought leadership around enabling and applying AI across the Product Security org.
• Be a change agent influencing and scaling the adoption of AI-enabled security tooling and best practices across the product security organization.
• Drive continuous verification of product security controls and requirements through AI-enabled automation and integration with existing product security tooling.
• Communicate complex product security and architecture trade-offs in a clear, outcome-focused way to both technical and non-technical stakeholders, from senior ICs to senior leadership.
• Mentor and coach product managers, engineers, and architects to raise the bar on product security literacy and design thinking across the organization.
• Contribute to the broader Expedia Group security strategy by identifying emerging product security risks and technology trends and proposing pragmatic, long-term architecture approaches.
• Contribute to creating a culture of continuous learning, data-driven decisions, and improvements.
• Collaborate across IT and Information Security teams to ensure end to end coverage across the product lifecycle - from concept and design through build, launch and operations.

Requirements

• Bachelor's degree in Computer Science or a related technical field; or equivalent related professional experience.
• 10+ years of product security and development experience
• Extensive experience performing application threat modeling
• Extensive experience conducting architecture reviews to find and evaluate application and infrastructure security risks
• Significant experience in the last several years applying Generative AI in software development and for end users, ideally in the context of a medium or large enterprise.
• Deep understanding of modern product development practices and CI/CD and how AI can change and improve these practices to increase both quality and velocity.
• Familiarity with 'agentic' architectures including SDKs, context engineering, MCPs, authorization.

Core Competencies

Demonstrates expertise in product security architecture, threat modeling, and security assessments, with a strong focus on integrating AI into security practices and product development processes. Proven ability to communicate complex security concepts to diverse stakeholders and mentor teams to enhance security literacy.

Highest-signal resume keywords

• Product Security Architecture
• Threat Modeling
• Generative AI Application
• CI/CD Practices
• Architecture Reviews

ATS Optimization Keywords

Hard Skills

• Application Threat Modeling
• Architecture Review
• Security Risk Evaluation
• AI-Enabled Automation
• Product Security Controls

Soft Skills

• Mentoring
• Communication
• Collaboration
• Influencing
• Change Management

Industry Keywords

• Product Security
• Continuous Verification
• Data-Driven Decisions
• Security Strategy
• Product Lifecycle

Tools & Technologies

• AI-Enabled Security Tooling
• SDKs
• Context Engineering
• MCPs
• Authorization Mechanisms