Product Security Architect III

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success. Why Join Us? To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win. We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a flexible work model (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We’re building a more open world. Join us. Product Security Architect III Our Technology Team partners with teams across Expedia Group to create innovative products, services, and tools to deliver high-quality experiences for travelers, partners, and our employees. A singular technology platform powered by data and machine learning provides secure, differentiated, and personalized experiences that drive loyalty and traveler satisfaction. The Product Security Architecture team partners with product, engineering, and platform teams to ensure security and privacy are built into Expedia Group products by design, from ideation through operations. We enable our business partners to build resilient, future-ready solutions that advance Expedia Group's security posture and operational velocity. We focus on secure-by-design product architecture, security assessments, threat modeling, and continuous verification of security requirements across our business products and platforms. You will join a small, senior team of hands-on product security architects who work across domains and technologies, helping teams make pragmatic security decisions that enable innovation at scale. In this role, you will: Define and evolve security architecture patterns, standards, and reference designs that enable secure-by-design product development across multiple platforms and services. Partner with product, engineering, and infrastructure teams to design secure system architectures, including API design, low-level design (LLD), and data models that protect customer and partner data. Lead threat modeling, security design reviews, and risk assessments for complex product initiatives, translating security requirements into actionable engineering guidance. Provide technical leadership on application security controls (authentication, authorization, encryption, key management, secrets handling) and drive their consistent adoption across domains. Guide teams in safely integrating and operating AI/ML‑enabled and AI-driven solutions, tools, or workflows that improve security and product outcomes, including applying AI/ML concepts to real-world products. Influence roadmap and technical decision-making by aligning product security architecture with business objectives, regulatory needs, and operational constraints across multiple product areas. Minimum Qualifications: Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience. 5+ years of relevant professional experience. Experience in product or application security with hands-on involvement in designing secure architectures for services, APIs, and data models within complex, distributed systems. Proven ownership of security architecture for a significant product area, service group, or domain, including driving security requirements from design through implementation. Strong technical depth in security fundamentals such as secure software development practices, identity and access management, cryptography usage, and cloud-native security controls, including familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products. Preferred Qualifications: Advanced experience defining and implementing security architecture patterns at scale for multi-service or domain-wide product ecosystems in a cloud-native environment. Track record of leading security architecture for complex, highly available, and high-throughput systems, including data-intensive and API-centric products, with a focus on operational excellence and resiliency. Demonstrated ability to drive secure-by-design practices across engineering teams, including formal threat modeling, security design reviews, and integration of security automation into CI/CD pipelines, telemetry, and monitoring. Experience designing and governing security controls for AI/ML‑enabled and AI-driven products or platforms, including model security, data protection, responsible use of AI in production systems, and safely integrating and operating AI/ML‑enabled solutions that improve outcomes. Deep expertise in applying data-driven approaches (such as security metrics, risk scores, and telemetry) to prioritize security investments, influence architecture decisions, and continuously improve product security posture across multiple domains. The total cash range for this position in Austin is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. The total cash range for this position in San Jose is $157,500.00 to $220,500.00. Employees in this role have the potential to increase their pay up to $252,000.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future. Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership. View our full list of benefits. Accommodation requests If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through the Accommodation Request. We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award-winning culture by organizations like Forbes, TIME, Disability:IN, and others. Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50 Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs. Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization. Expedia Group (NASDAQ: EXPE) powers travel for everyone, everywhere through our global platform. Driven by the core belief that travel is a force for good, we help people experience the world in new ways and build lasting connections. We provide industry-leading technology solutions to fuel partner growth and success, while facilitating memorable experiences for travelers. Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. For more information, visit Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals to whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is lifeatexpediagroup.com/jobs.