Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.
We're looking for a Cyber Security Architect to embed security into how we design and build technology — not add it after the fact. You'll bring deep security architecture expertise to review proposed solutions and designs across the business, identify risk early through structured threat modeling and architecture review, and translate findings into clear, actionable mitigation options that engineering teams can actually implement.
This role sits at the intersection of engineering, risk management, and the technical realities of running global travel technology: booking platforms, payment flows, traveler data protection, and extensive supplier integrations. You'll partner with product, engineering, and enterprise architecture teams from the earliest design conversations, build reusable security patterns and reference architectures, and serve as the trusted technical authority when it's time to make a clear, well-reasoned call on risk versus speed.
What You'll Do
Secure solution design and architecture review
Review designs for new products, platforms, and major changes using structured threat modeling (e.g., STRIDE) to find risks, gaps, and single points of failure
Turn findings into actionable recommendations that balance risk, cost, and delivery timelines
Own the review process, define “secure enough” at each design stage, and produce reference architectures and reusable patterns
Cloud, application, and data security architecture
Set standards for cloud environments (AWS, Azure, GCP), including segmentation, workload isolation, IAM (least-privilege, zero-trust), encryption, and secrets management
Guide secure API and microservices design, including authentication, authorization, and rate limiting
Protect traveler and payment data across its lifecycle (including PCI DSS flows), championing privacy-by-design and data minimization with Privacy and Data Security Investigations teams
Third-party and supplier risk
Assess integrations with airlines, hotels, GDSs (Sabre, Amadeus, Travelport), payment processors, and other travel suppliers
Support technical due diligence for new vendors, partnerships, and acquisitions
Define secure integration patterns for fast supplier onboarding without compromising standards
AI Security Architecture
Review AI/ML implementations (traveler assistants, copilots, automation) before launch, assessing risks like prompt injection, output data leakage, and over-permissioned agents
Define guardrails and agentic AI patterns, including scoped permissions, approval workflows, audit trails, AI-specific logging and monitoring, and revocation of misbehaving agents
Set standards for model provenance and versioning, vet third-party model providers, and define when human review is required before launch
Identity Security Architecture
Define identity standards for AI agents and non-human accounts, including unique agent identities, least-privilege access, and credential lifecycle management
Assess risks specific to AI agents authenticating or acting on behalf of users, such as impersonation and token misuse
Set authorization boundaries for AI agents involved in provisioning, deprovisioning, or access reviews
Governance, standards, and influence
Maintain and evolve security architecture standards, guardrails, and design principles, creating reusable frameworks that improve the quality and speed of engineering output across teams
Align architecture decisions with frameworks and regulations (NIST CSF, ISO 27001, PCI DSS, GDPR, SOC 2) and translate technical risk and trade-offs into terms that engineering, product, and executive stakeholders can act on
Partner with the Cyber Defense team (CSIRT, CTI, Detection Engineering, Data Security…