Product Security Architect III

About the role

The Product Security Architecture team at Expedia Group partners with product, engineering, and platform teams to ensure security and privacy are built into Expedia Group products by design, from ideation through operations. As a Product Security Architect III, you will define and evolve security architecture patterns, standards, and reference designs that enable secure-by-design product development across multiple platforms and services.

Responsibilities

• Define and evolve security architecture patterns, standards, and reference designs that enable secure-by-design product development across multiple platforms and services.
• Partner with product, engineering, and infrastructure teams to design secure system architectures, including API design, low-level design (LLD), and data models that protect customer and partner data.
• Lead threat modeling, security design reviews, and risk assessments for complex product initiatives, translating security requirements into actionable engineering guidance.
• Provide technical leadership on application security controls (authentication, authorization, encryption, key management, secrets handling) and drive their consistent adoption across domains.
• Guide teams in safely integrating and operating AI/ML-enabled and AI-driven solutions, tools, or workflows that improve security and product outcomes, including applying AI/ML concepts to real-world products.
• Influence roadmap and technical decision-making by aligning product security architecture with business objectives, regulatory needs, and operational constraints across multiple product areas.

Requirements

• Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
• 5+ years of relevant professional experience.
• Experience in product or application security with hands-on involvement in designing secure architectures for services, APIs, and data models within complex, distributed systems.
• Proven ownership of security architecture for a significant product area, service group, or domain, including driving security requirements from design through implementation.
• Strong technical depth in security fundamentals such as secure software development practices, identity and access management, cryptography usage, and cloud-native security controls, including familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products.

Preferred Qualifications

• Advanced experience defining and implementing security architecture patterns at scale for multi-service or domain-wide product ecosystems in a cloud-native environment.
• Track record of leading security architecture for complex, highly available, and high-throughput systems, including data-intensive and API-centric products, with a focus on operational excellence and resiliency.
• Demonstrated ability to drive secure-by-design practices across engineering teams, including formal threat modeling, security design reviews, and integration of security automation into CI/CD pipelines, telemetry, and monitoring.
• Experience designing and governing security controls for AI/ML-enabled and AI-driven products or platforms, including model security, data protection, responsible use of AI in production systems, and safely integrating and operating AI/ML-enabled solutions that improve outcomes.
• Deep expertise in applying data-driven approaches (such as security metrics, risk scores, and telemetry) to prioritize security investments, influence architecture decisions, and continuously improve product security posture across multiple domains.

Benefits

The total cash range for this position varies by location, but typically ranges from $146,000.00 to $252,000.00, depending on factors such as location, available budget, and performance. Expedia Group offers a comprehensive benefits package, including medical/dental/vision coverage, paid time off, and an Employee Assistance Program. Employees also have access to wellness and travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership. Expedia Group is committed to creating an inclusive work environment and is an equal opportunity employer.