Product Security Architect III

Product Security Architect III

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

In this role, you will:

• Define and evolve security architecture patterns, standards, and reference designs that enable secure-by-design product development across multiple platforms and services.
• Partner with product, engineering, and infrastructure teams to design secure system architectures, including API design, low-level design (LLD), and data models that protect customer and partner data.
• Lead threat modeling, security design reviews, and risk assessments for complex product initiatives, translating security requirements into actionable engineering guidance.
• Provide technical leadership on application security controls (authentication, authorization, encryption, key management, secrets handling) and drive their consistent adoption across domains.
• Guide teams in safely integrating and operating AI/ML-enabled and AI-driven solutions, tools, or workflows that improve security and product outcomes, including applying AI/ML concepts to real-world products.
• Influence roadmap and technical decision-making by aligning product security architecture with business objectives, regulatory needs, and operational constraints across multiple product areas.

Minimum Qualifications:

• Bachelor's degree in Computer Science or a related technical field; or Equivalent related professional experience.
• 5+ years of relevant professional experience.
• Experience in product or application security with hands-on involvement in designing secure architectures for services, APIs, and data models within complex, distributed systems.
• Proven ownership of security architecture for a significant product area, service group, or domain, including driving security requirements from design through implementation.
• Strong technical depth in security fundamentals such as secure software development practices, identity and access management, cryptography usage, and cloud-native security controls, including familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products.

The total cash range for this position in Austin is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. The total cash range for this position in Seattle is $146,000.00 to $204,500.00. Employees in this role have the potential to increase their pay up to $233,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role. The total cash range for this position in San Jose is $157,500.00 to $220,500.00. Employees in this role have the potential to increase their pay up to $252,000.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual's knowledge, skills, and experience. Pay ranges may be modified in the future.