Senior Product Security Architect

Bachelor’s degree in Computer Science or a related technical field; or equivalent related professional experience.

10+ years of product security and development experience

Extensive experience performing application threat modeling

Extensive experience conducting architecture reviews to find and evaluate application and infrastructure security risks

Significant experience in the last several years applying Generative AI in software development and for end users, ideally in the context of a medium or large enterprise.

Deep understanding of modern product development practices and CI/CD and how AI can change and improve these practices to increase both quality and velocity.

Familiarity with ‘agentic’ architectures including SDKs, context engineering, MCPs, authorization.

Expertise in public cloud platforms (AWS is preferred), containerization and orchestration (Kubernetes, Docker), and related technologies.

Excellent communication and collaboration skills, with the ability to work effectively with both technical and non-technical stakeholders.

Track record of setting and evolving security architecture standards, patterns, and guardrails for complex, multi-tenant or multi-domain platforms, and driving their adoption across diverse engineering teams.

operating product security at scale in cloud-native environments (such as large microservices architectures), including secure service-to-service communication, token-based auth, and secret and certificate management.

Deep experience conducting and scaling threat modeling, security design reviews, and architecture risk assessments, and using insights to shape platform capabilities, reusable controls, and security automation.

Familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products, including leveraging AI/ML‐enabled code analysis, anomaly detection, or security automation; safely integrates and operates AI/ML‐enabled solutions that improve security posture, detection, and response.

Demonstrated experience taking products from concept to scaled adoption by partnering with product and engineering leadership to embed security requirements into product vision, architecture, and roadmaps, and to measure and report on security outcomes.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience.

Pay ranges may be modified in the future.

Expedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership.

Learn more about life at Expedia Group at https://careers.expediagroup.com/life.

Accommodation requests

Expedia Group is committed to providing an inclusive and accessible recruiting experience.

If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings.

Across our brands and business, we help travelers explore the world with confidence and ease.

Important notice

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams.

Never share sensitive personal information unless you are confident of the recipient.

Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact.

Our email domain is @expediagroup.com.

The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.