Principal Security Specialist

Job Title Principal Security SpecialistSummary: We are looking for a Principal Security Specialist to lead security design, risk alignment, and governance for a large-scale Self-Service application ecosystem. In this role, you´ll shape secure architectures across cloud and on-prem environments, ensuring alignment with business strategy, risk appetite, and industry standards. You´ll also work closely with engineering, R&D, and security stakeholders to embed security into the full development lifecycle, provide architectural assurance, and act as a trusted advisor on application, identity, and cloud security. This is a highly collaborative role with strong influence across product teams, combining hands-on security expertise with leadership, governance, and communication skills. Key Responsibilities: Lead security design and risk alignment for Self-Service applications, ensuring architectures are secure, scalable, compliant, and aligned with security standards and business objectives; Analyze and articulate security risks, translating technical findings into clear business impact and supporting residual risk acceptance decisions; Provide expert guidance on security architecture, secure coding practices, and application development, supporting programs and projects through design validation and governance gates; Represent the Security Office within the R&D organization, acting as the primary point of contact for security initiatives in the Self-Service domain; Embed security processes into global frameworks and methodologies, driving consistent adoption across engineering teams; Advise on cloud security controls at both application and operational levels, supporting secure deployment and day-to-day operations in cloud environments; Maintain and manage the security risk register, coordinate IT risk assessments and audit activities, and propose improvements based on operational effectiveness; Own reporting and governance activities related to the Secure Development Lifecycle (SDL) and compliance programs; Conduct and facilitate threat modeling sessions in collaboration with security managers and stakeholders; Provide second-level support to ethical hacking / White Hat teams, offering expert guidance on security issues and remediation strategies; Promote security awareness through training, communication, and active participation in security initiatives across the engineering organization. About the Ideal Candidate A tertiary qualification in Information Technology, Software Engineering, or a related discipline.; Strong experience in security architecture, design reviews, and risk assessment within complex application environments; Proven hands-on experience implementing Single Sign-On (SSO) solutions across modern and legacy systems; Practical experience integrating Multi-Factor Authentication (MFA) across diverse application landscapes; Experience deploying and managing Privileged Access Management (PAM) solutions; Solid background in cloud security with experience working with AWS ( preferably); Good working knowledge of Windows and Linux systems, including secure configuration and hardening practices; Strong understanding of secure development principles, threat modeling, and Secure Development Lifecycle (SDL) practices; Excellent communication skills, with the ability to influence stakeholders and explain security risks in business terms; A collaborative mindset, comfortable working across security, engineering, and product teams. What We Can Offer You: A truly global DNA - Everything at Amadeus is global, from our people to our business, which translates into our footprint, processes, and culture. Great opportunities to learn - Learning happens all the time and in many ways at Amadeus, through on-the-job training, formal learning activities, and day-to-day interactions with colleagues. A caring environment - Amadeus fosters a caring environment, nurturing both a fulfilling career and personal and family life. We care about our employees and strive to provide a supportive work environment. A flexible working model - We want our employees to do their best work, wherever and however it works best for them. A diverse and inclusive community - We are committed to leveraging our uniquely diverse population to drive innovation, creativity, and collaboration across our organization. A Reliable Company - Trust and reliability are fundamental values that drive our actions and shape long-lasting relationships with our customers, partners, and employees. A critical mission and purpose - At Amadeus, you will be powering the future of travel and pursuing a critical mission and extraordinary purpose. Diversity & Inclusion Amadeus aspires to be a leader in Diversity, Equity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.   Amadeus is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.