Senior Product Security Architect

Traveltechessentialist; San Jose (CA); Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Travel perks

Generous time off

Parental leave

Flexible work model

Office locations

Career development

Job summary

Expedia Group is seeking a Product Security Architect III to lead security architecture across multiple services and APIs. You will own secure-by-design patterns, perform threat modeling, and guide teams on cryptography, IAM, and data protection while incorporating AI/ML security considerations.

The role emphasizes collaboration with product and engineering, cloud-native security, and driving security automation within CI/CD pipelines to ensure robust, scalable safeguards across Expedia’s travel

Qualifications

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• 5+ years of professional security experience in product or application security.
• Proven ownership of security architecture for a major product area or domain.
• Strong knowledge of secure software development, IAM, cryptography, and cloud-native security controls.
• Familiarity with AI-driven systems and applying AI/ML concepts to real-world products.

Responsibilities

• Define and evolve security architecture patterns, standards, and reference designs for secure-by-design product development across platforms.
• Partner with product, engineering, and infrastructure teams to design secure architectures for APIs, data models, and LL designs.
• Lead threat modeling, security design reviews, and risk assessments translating security requirements into engineering guidance.
• Provide technical leadership on authentication, authorization, encryption, key management, and secrets handling across domains.
• Guide teams in safely integrating and operating AI/ML-enabled solutions to improve security and product outcomes.
• Influence roadmaps and align security architecture with business goals and regulatory needs.

Skills

Security architecture

Product security

Threat modeling

Security design reviews

AI/ML security

Security automation

CI/CD integration

Cloud security

Data protection

Security fundamentals

Education

Bachelor’s degree in Computer Science or related field

Tools

None

Job description

Expedia Group is seeking a Product Security Architect III to lead security architecture across multiple services and APIs. You will own secure-by-design patterns, perform threat modeling, and guide teams on cryptography, IAM, and data protection while incorporating AI/ML security considerations.

The role emphasizes collaboration with product and engineering, cloud-native security, and driving security automation within CI/CD pipelines to ensure robust, scalable safeguards across Expedia’s travel