Skip to main content
CareerApp
Expedia Group

Product Security Architect III

Expedia Group

full time · Senior

$146,000 – $204,500

Listed on Expedia Group’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This is a senior technical leadership role where you'll define security architecture patterns and standards for Expedia's products, partnering with engineering teams to ensure security is built in from the start. It suits experienced security professionals who can influence architecture decisions across multiple domains while keeping pace with evolving threats like AI/ML systems.

Our summary, not Expedia Group’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Bachelor's degree in Computer Science or related technical field, or equivalent professional experience
  • 5+ years of professional experience in product or application security
  • Hands-on experience designing secure architectures for services, APIs, and data models in distributed systems
  • Proven ownership of security architecture for a significant product area or service group
  • Technical expertise in secure software development, identity and access management, cryptography, and cloud-native security controls

Nice to have

  • Advanced experience defining security architecture patterns at scale in cloud-native, multi-service environments
  • Track record leading security architecture for complex, highly available, high-throughput systems
  • Demonstrated ability to drive secure-by-design practices including threat modeling, security design reviews, and CI/CD integration
  • Experience designing security controls for AI/ML-enabled products, including model security and responsible AI use
  • Deep expertise applying data-driven approaches like security metrics and risk scores to prioritize investments across multiple domains

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.