Senior Product Security Architect: AI-Driven Secure Design

Expedia Group

San Jose (CA)

On-site

USD 199,000 - 278,500

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical Insurance

Dental & Vision

Travel discounts

Life Insurance

Job summary

Expedia Group is seeking a Senior Product Security Architect in San Jose to lead secure-by-design product architecture and threat modeling across domains. You will mentor engineers, drive AI-enabled security tooling, and partner with product and platform teams to embed security into roadmaps.

Join a senior, hands-on team shaping security strategy, standards, and scalable security practices for a cloud-native, multi-tenant environment, delivering secure and trusted experiences for travelers and

Qualifications

Bachelor’s degree in Computer Science or a related technical field; or equivalent related professional experience.
10+ years of product security and development experience
Extensive experience performing application threat modeling
Extensive experience conducting architecture reviews to find and evaluate application and infrastructure security risks
Significant experience in the last several years applying Generative AI in software development and for end users, ideally in the context of a medium or large enterprise.
Deep understanding of modern product development practices and CI/CD and how AI can change and improve these practices to increase both quality and velocity.
Familiarity with ‘agentic’ architectures including SDKs, context engineering, MCPs, authorization.

Responsibilities

Serve as a trusted product security architecture advisor to product, engineering, and platform teams, helping them design secure, highly available, and privacy‑aware products and services.
Lead and facilitate threat modeling and security assessments for new and evolving products, services, and platforms, translating findings into clear, actionable recommendations.
Partner closely with product and engineering leaders to embed security requirements into product roadmaps, design reviews, and delivery processes without slowing down innovation.
Provide thought leadership around enabling and applying AI across the Product Security org.
Be a change agent influencing and scaling the adoption of AI‑enabled security tooling and best practices across the product security organization.
Drive continuous verification of product security controls and requirements through AI‑enabled automation and integration with existing product security tooling.
Communicate complex product security and architecture trade‑offs in a clear, outcome‑focused way to both technical and non‑technical stakeholders, from senior ICs to senior leadership.
Mentor and coach product managers, engineers, and architects to raise the bar on product security literacy and design thinking across the organization.
Contribute to the broader Expedia Group security strategy by identifying emerging product security risks and technology trends and proposing pragmatic, long‑term architecture approaches.
Contribute to creating a culture of continuous learning, data‑driven decisions, and improvements.
Collaborate across IT and Information Security teams to ensure end to end coverage across the product lifecycle – from concept and design through build, launch and operations.