Cyber Security Architect

American Express Global Business Travel is hiring a Cyber Security Architect to embed security into technology design and development. The role reviews solutions, identifies and mitigates risk, sets reusable security standards, and partners with engineering, product, and architecture teams across cloud, application, data, supplier, AI, and identity security.

Responsibilities:

• Review designs for new products, platforms, and major changes using structured threat modeling (e.g., STRIDE) to find risks, gaps, and single points of failure
• Turn findings into actionable recommendations that balance risk, cost, and delivery timelines
• Own the review process, define “secure enough” at each design stage, and produce reference architectures and reusable patterns
• Set standards for cloud environments (AWS, Azure, GCP), including segmentation, workload isolation, IAM (least-privilege, zero-trust), encryption, and secrets management
• Guide secure API and microservices design, including authentication, authorization, and rate limiting
• Protect traveler and payment data across its lifecycle (including PCI DSS flows), championing privacy-by-design and data minimization with Privacy and Data Security Investigations teams
• Assess integrations with airlines, hotels, GDSs (Sabre, Amadeus, Travelport), payment processors, and other travel suppliers
• Support technical due diligence for new vendors, partnerships, and acquisitions
• Define secure integration patterns for fast supplier onboarding without compromising standards
• Review AI/ML implementations (traveler assistants, copilots, automation) before launch, assessing risks like prompt injection, output data leakage, and over-permissioned agents
• Define guardrails and agentic AI patterns, including scoped permissions, approval workflows, audit trails, AI-specific logging and monitoring, and revocation of misbehaving agents
• Set standards for model provenance and versioning, vet third-party model providers, and define when human review is required before launch
• Define identity standards for AI agents and non-human accounts, including unique agent identities, least-privilege access, and credential lifecycle management
• Assess risks specific to AI agents authenticating or acting on behalf of users, such as impersonation and token misuse
• Set authorization boundaries for AI agents involved in provisioning, deprovisioning, or access reviews
• Maintain and evolve security architecture standards, guardrails, and design principles, creating reusable frameworks that improve the quality and speed of engineering output across teams
• Align architecture decisions with frameworks and regulations (NIST CSF, ISO 27001, PCI DSS, GDPR, SOC 2) and translate technical risk and trade-offs into terms that engineering, product, and executive stakeholders can act on
• Partner with the Cyber Defense team (CSIRT, CTI, Detection Engineering, Data Security Investigations) to feed incident lessons and threat intelligence into architecture decisions, and mentor engineers and junior architects on secure design

Requirements:

• 8+ years in cybersecurity, with meaningful time spent in a security architecture or senior security engineering role
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP)
• Strong grounding in application security, network security, and identity and access management, including least-privilege and Zero Trust principles
• Experience applying threat modeling methodologies and translating findings into practical design changes
• Working knowledge of relevant regulations and standards, such as PCI DSS, GDPR, or ISO 27001
• Demonstrated ability to translate technical risk into terms non-technical stakeholders can act on and to influence decisions without direct authority
• A bachelor's degree in a related field, or equivalent experience
• Sound judgment to weigh risk against business speed and land on a clear recommendation, not just flag problems
• Comfort working at both whiteboard design and deep technical levels, with clear written and verbal communication for audiences from engineers to executives
• Ability to build trust and influence teams outside your reporting line, while evaluating emerging technologies (AI-assisted booking, new payment rails) and recommending the strongest path to a future-state security architecture
• Relevant certifications such as CISSP, SABSA, TOGAF, CCSP, Microsoft Cybersecurity Architect Expert, or a cloud security specialty (Azure Security Engineer, AWS Security Specialty, Google Professional Cloud Security Engineer)
• Experience supporting technical due diligence for M&A or major vendor integrations
• Familiarity with DevSecOps and embedding security into CI/CD pipelines, plus security considerations for AI/ML systems (e.g., prompt injection, AI governance frameworks)