Product Security Architect III

Product Security Architect III

Expedia Group’s Technology Team seeks a senior product security architect to partner with product, engineering, and platform teams, ensuring security and privacy are integral to product design from ideation through operations.

• Define and evolve security architecture patterns, standards, and reference designs for secure‑by‑design product development across multiple platforms and services.
• Partner with product, engineering, and infrastructure teams to design secure system architectures, including API design, low‑level design (LLD), and data models that protect customer and partner data.
• Lead threat modeling, security design reviews, and risk assessments for complex product initiatives, translating security requirements into actionable engineering guidance.
• Provide technical leadership on application security controls (authentication, authorization, encryption, key management, secrets handling) and drive their consistent adoption across domains.
• Guide teams in safely integrating and operating AI/ML‑enabled and AI‑driven solutions, tools, or workflows that improve security and product outcomes.
• Influence roadmap and technical decision‑making by aligning product security architecture with business objectives, regulatory needs, and operational constraints across product areas.

• Bachelor’s degree in Computer Science or related technical field, or equivalent professional experience.
• 5+ years of relevant product or application security experience.
• Hands‑on involvement in designing secure architectures for services, APIs, and data models within complex, distributed systems.
• Proven ownership of security architecture for a significant product area or domain, including driving security requirements from design through implementation.
• Strong technical depth in secure software development practices, identity and access management, cryptography usage, and cloud‑native security controls.
• Familiarity with AI‑driven systems and workflows, applying AI/ML concepts to real‑world products.

• Advanced experience defining and implementing security architecture patterns at scale for multi‑service or domain‑wide ecosystems in cloud‑native environments.
• Track record of leading security architecture for complex, highly available, and high‑throughput systems.
• Demonstrated ability to drive secure‑by‑design practices across engineering teams, including formal threat modeling, security design reviews, and integration of security automation into CI/CD pipelines.
• Experience designing and governing security controls for AI/ML‑enabled and AI‑driven products or platforms, including model security and responsible AI usage.
• Deep expertise in applying data‑driven approaches (security metrics, risk scores, telemetry) to prioritize security investments and influence architecture decisions.

Pay ranges (USD):
Austin: $146,000 – $204,500 (potential target pay up to $233,500).
Seattle: $146,000 – $204,500 (potential target pay up to $233,500).
San Jose: $157,500 – $220,500 (potential target pay up to $252,000).
Benefits include medical, dental, vision, paid time off, employee assistance program, wellness and travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.

Expedia Group (NASDAQ: EXPE) powers travel for everyone, everywhere through our global platform. Expedia Group is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E‑Verify.