Manager, Application & AI Security

Arrivia is a prominent technology provider that powers the travel experiences behind many of the world’s leading membership and loyalty brands. Its private travel marketplace offers members exclusive access to deeply discounted cruises, resorts, and hotels, making luxury travel accessible and affordable. Plus, Arrivia’s state-of-the-art platform supports the booking, servicing, and rewards processes underlying these loyalty programs. This sophisticated platform operates on a distributed, cloud-native architecture, which is constantly scaled and refined by dedicated engineering teams to meet the needs of millions of users globally. Arrivia prides itself on innovation in travel technology, enabling its customers and partners to access premium travel deals seamlessly while ensuring a reliable and secure digital experience. The company’s commitment to technology is reflected in its focus on security, scalability, and cutting-edge AI integration throughout its platform.

The Manager of Application & AI Security at Arrivia plays a critical leadership role overseeing the safety and integrity of application security and artificial intelligence governance across the company. Reporting directly to the EVP of IT and Security, this full-time remote position in the United States offers a competitive annual salary range of $120,000 to $160,000. The manager is responsible for leading a team of four to five security engineers and experts to uphold Arrivia’s central AI governance mandate. This means owning the DevSecOps golden pipelines, application security testing, and runtime security for the company’s Member Commerce Platform (MCP) and AI agents. The role involves embedding guardrails-as-code to ensure the speed of software delivery never surpasses comprehensive risk review processes.

Beyond securing the software development lifecycle across application and PaaS layers, the position sets the strategic policy for safe adoption of large language models (LLMs) and AI copilots within the company. Responsibilities include implementing controls for shadow AI use, managing model registries, and maintaining rigid approval workflows to mitigate security and compliance risks related to AI. The ideal candidate will have over five years of hands-on experience in application security or DevSecOps, including leadership experience, and a strong track record of integrating security into CI/CD pipelines as guardrails-as-code. Expertise in AI and LLM security measures—such as usage governance, prompt injection testing, LLM red-teaming, and runtime controls for MCP—is essential. The role also requires professional certification with a CISSP or CCNP-Security.

Additionally, applicants are evaluated with a practical challenge designed by Arrivia to demonstrate real-world security judgment. Candidates complete a scenario aligned with the actual work environment, producing an artifact and walkthrough video that highlights their approach to application and AI risk assessment and guardrail establishment. This innovative hiring process allows candidates to showcase their technical reasoning and security acumen directly to the security leadership team, emphasizing proof of skill over traditional credentials or referrals.

As a member of Arrivia’s security leadership team, this role offers the opportunity to shape the future of secure AI adoption and application security in a fast-growing tech company focused on travel and loyalty programs. Employees enjoy access to discounted member travel benefits including cruises, resorts, and hotel stays, along with comprehensive medical, dental, and vision insurance coverage and a 401k plan with company matching contributions. Arrivia’s culture promotes innovation, security, and a commitment to delivering exceptional travel technology experiences, making it an exciting and rewarding workplace for security professionals passionate about AI and application security.