Amadeus
Senior Information Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Amadeus
Amadeus IT Group is a global leader in travel technology, providing essential infrastructure for the travel and tourism industry. Founded in 1987 by four major European airlines, the company is headquartered in Madrid, Spain, and operates in over 215 countries. Amadeus is recognized as the world's leading global distribution system (GDS), processing millions of transactions daily and serving more than 180,000 travel agencies and airline sales offices. The company offers a comprehensive suite of technology solutions, including a GDS for booking flights, hotels, car rentals, and rail services. Its Altéa Passenger Services System helps airlines manage passenger operations, assisting in boarding over 2 billion passengers each year. Amadeus also provides inventory and reservation management systems, cloud-based solutions for hotels and destinations, and mobile technology for travel solutions. With a strong focus on strategic partnerships, Amadeus collaborates with major players in the travel industry to enhance its offerings.
Security at Amadeus
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Amadeus follows a risk-based approach where security is 'embedded from the start in a systematic manner.' Their philosophy centers on 'Security by design' and 'Privacy by design,' ensuring these principles are considered from the outset of product development.
- The mission is to deliver trusted travel technology by making information protection central to their operations.
- They utilize a formal Secure Development Lifecycle (SDLC) with 'Staged Gates' to ensure compliance before product release.
Security Team
Amadeus employs a centralized security governance model led by a Group CISO who has the authority to appoint security representatives across regions and business units. Key public-facing leaders include Jay Hilyard (Director, Application Security - Hospitality), Svend Fjerdingstad (Head, Application Security Office), and Prakash Mishra (Head - Application Security Office, Bangalore). The team includes Application Security Engineers responsible for integrating scanning tools like Checkmarx into CI/CD pipelines. Team size and exact current job counts are not publicly available.
Key Initiatives
Active initiatives include the implementation of a Secure SDLC featuring 'Staged Gates' and the integration of automated security scanning into CI/CD pipelines. The team performs static and dynamic code analysis and manages vulnerability triage through tools like Qualys and Checkmarx. Recent efforts as of 2026 include aligning with AI security principles and EU AI Act compliance. There is no public evidence of a formal Security Champions program or specific 'shift-left' IDE-level integrations.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.