Position Details

Salary $146K – $204K USD / year

Type Not Specified

Experience senior

Exp. Years Not specified

Education Not specified

Category Cybersecurity

About this role

Lead product security architecture for Expedia Group by defining secure-by-design patterns and reference designs. Partner with product, engineering, and infrastructure teams to run threat modeling, design reviews, and risk assessments, while guiding secure implementation of application security controls and AI/ML-enabled solutions.

Key Responsibilities

Define and evolve security architecture patterns, standards, and reference designs for secure-by-design
Lead threat modeling, security design reviews, and risk assessments for complex initiatives
Partner on secure system architectures including API design, low-level design (LLD), and data models
Provide technical leadership on application security controls (authentication, authorization, encryption, key management, secrets handling)
Guide teams in safely integrating and operating AI/MLenabled and AI-driven solutions to improve security outcomes

Technical Overview

Own security architecture standards across multiple platforms and services, including API design, low-level design (LLD), and data models. Provide technical leadership for authentication, authorization, encryption, key management, and secrets handling, and guide safe integration of AI/ML-enabled and AI-driven workflows.

Ideal Candidate

The ideal candidate is a senior product security architect who can define secure-by-design architecture patterns and lead threat modeling, security design reviews, and risk assessments. They have hands-on expertise in application security controls including authentication, authorization, encryption, key management, and secrets handling, and can guide teams integrating AI/ML-enabled solutions safely.

Must-Have Skills

threat modelingsecurity design reviewsrisk assessmentssecure-by-design product architectureapplication security controls (authenticationauthorizationencryptionkey managementsecrets handling)security assessments

Required Skills

security architecture patternssecurity architecture standardsreference designssecure-by-designsecurity assessmentsthreat modelingcontinuous verification of security requirementssecurity design reviewsrisk assessmentsAPI designlow-level design (LLD)data modelsauthenticationauthorizationencryptionkey managementsecrets handlingapplication security controlsAI/MLenabled solutions integrationAI-driven solutions security guidance

Hard Skills

security architecture patternssecurity architecture standardsreference designssecure-by-design product developmentsecurity assessmentsthreat modelingcontinuous verification of security requirementssecurity design reviewsrisk assessmentsAPI designlow-level design (LLD)data modelsapplication security controlsauthenticationauthorizationencryptionkey managementsecrets handlingsecure system architecturesecurity and privacy by designAI/MLenabled solutions integration guidanceAI-driven solutions security guidanceAI/ML concepts applied to security and product outcomes

Soft Skills

technical leadershipcross-functional partnershipinfluencing roadmap decisionspragmatic security decision-makingcommunication of security requirements into engineering guidancecollaboration with product and engineering teams

Industry & Role

Industry SaaS

Job Function Architect and operationalize product security through secure-by-design standards, threat modeling, and application security control guidance.

Role Subtype Security Architect

Tech Domains Cybersecurity, AI & Machine Learning

Keywords for Your Resume

Product Security Architect IIIProduct Security Architecture teamsecure-by-designsecurity architecture patternssecurity architecture standardsreference designssecurity assessmentsthreat modelingcontinuous verification of security requirementssecurity design reviewsrisk assessmentsAPI designlow-level design (LLD)data modelsauthenticationauthorizationencryptionkey managementsecrets handlingAI/MLenabledAI-driven solutionsapplication security controlssecurity postureoperational velocityProduct Security Architect

Deal Breakers

Must demonstrate experience leading threat modeling and security design reviews, Must demonstrate application security controls expertise (authentication, authorization, encryption, key management, secrets handling)

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile