Cyber Security Architect (AI)

Location: United States

Salary: $104,300–$193,700 annual base salary, plus eligibility for a discretionary annual bonus.

Company

hirify.global provides hirify.global technology and services, including booking platforms, payment flows, traveler data protection, and supplier integrations.

What you will do

• Review new products, platforms, and major changes using structured threat modeling such as STRIDE; identify risks, gaps, and single points of failure.
• Define secure solution standards and reusable reference architectures for cloud environments, applications, APIs, microservices, networks, data, IAM, encryption, secrets management, and Zero Trust.
• Protect traveler and payment data across its lifecycle, including PCI DSS flows, privacy-by-design, and data minimization.
• Assess airline, hotel, GDS, payment processor, and other supplier integrations; support technical due diligence for vendors, partnerships, and acquisitions.
• Review AI/ML implementations, define guardrails and agentic AI patterns, and establish standards for model provenance, versioning, logging, monitoring, audit trails, approval workflows, and human review.
• Maintain security governance and standards aligned with NIST CSF, ISO 27001, PCI DSS, GDPR, and SOC 2; partner with cyber defense teams and mentor engineers and junior architects.

Requirements

• 8+ years of cybersecurity experience, including meaningful experience in security architecture or senior security engineering.
• Hands-on experience designing or reviewing cloud-based systems using AWS, Azure, or GCP.
• Strong knowledge of application security, network security, and identity and access management, including least-privilege and Zero Trust principles.
• Experience applying threat modeling methodologies and translating findings into practical design changes.
• Working knowledge of relevant regulations and standards, including PCI DSS, GDPR, or ISO 27001.
• Ability to translate technical risk for non-technical stakeholders and influence decisions without direct authority.
• Bachelor’s degree in a related field or equivalent experience.
• Sound judgment in balancing risk, cost, delivery timelines, and business speed; strong written and verbal communication from engineering to executive audiences.
• Ability to build trust and influence teams outside the reporting line while evaluating emerging technologies and recommending future-state security architecture.

Nice to have

• Certifications such as CISSP, SABSA, TOGAF, CCSP, Microsoft Cybersecurity Architect Expert, Azure Security Engineer, AWS Security Specialty, or Google Professional Cloud Security Engineer.
• Experience supporting technical due diligence for M&A or major vendor integrations.
• Familiarity with DevSecOps, CI/CD security, and security considerations for AI/ML systems, including prompt injection and AI governance frameworks.

Culture & Benefits

• Inclusive and collaborative culture with opportunities to contribute to business and industry impact.
• Flexible country-specific health and welfare insurance, retirement programs, parental leave, adoption assistance, and wellbeing resources.
• Weekly travel deals on flights, hotels, cruises, car rentals, and other travel services.
• Access to more than 20,000 learning courses, leadership programs, and internal job opportunities.
• Inclusion Groups and reasonable accommodation support are available.