Senior Product Security Architect: Secure-by-Design

Expedia Group; Seattle (WA); On-site; USD 146,000 - 252,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Employee Assistance Program

Travel discounts

Travel reimbursement

Job summary

Expedia Group is seeking a Product Security Architect III to lead secure-by-design architecture across multiple platforms. You will partner with product, engineering, and infrastructure teams to design secure system architectures, including API design and data models, while driving threat modeling and risk assessments for complex initiatives.

Managing authentication, authorization, encryption, and AI/ML security, you will influence roadmaps and ensure secure adoption across domains, contributing

Qualifications

• Bachelor’s degree in Computer Science or related field, or Equivalent related professional experience.
• 5+ years of relevant professional experience.
• Experience in product or application security with hands-on involvement in designing secure architectures for services, APIs, and data models within complex, distributed systems.
• Proven ownership of security architecture for a significant product area, service group, or domain, including driving security requirements from design through implementation.
• Strong technical depth in security fundamentals such as secure software development practices, IAM, cryptography, and cloud-native security controls, including familiarity with AI-driven systems and applying AI/ML concepts to real world products.

Responsibilities

• Define and evolve security architecture patterns, standards, and reference designs that enable secure-by-design product development across multiple platforms and services.
• Partner with product, engineering, and infrastructure teams to design secure system architectures, including API design, low-level design (LLD), and data models that protect customer and partner data.
• Lead threat modeling, security design reviews, and risk assessments for complex product initiatives, translating security requirements into actionable engineering guidance.
• Provide technical leadership on authentication, authorization, encryption, key management, secrets handling and drive their consistent adoption across domains.
• Guide teams in safely integrating and operating AI/ML-enabled and AI-driven solutions, tools, or workflows that improve security and product outcomes, including applying AI/ML concepts to real-world products.
• Influence roadmap and technical decision-making by aligning product security architecture with business objectives, regulatory needs, and operational constraints across multiple product areas.

Skills

Security architecture

Threat modeling

API design

Data modelling

Cloud security

AI/ML security

Security governance

Education

Bachelor’s degree in Computer Science or related field

Job description

Expedia Group is seeking a Product Security Architect III to lead secure-by-design architecture across multiple platforms. You will partner with product, engineering, and infrastructure teams to design secure system architectures, including API design and data models, while driving threat modeling and risk assessments for complex initiatives.

Managing authentication, authorization, encryption, and AI/ML security, you will influence roadmaps and ensure secure adoption across domains, contributing