Cyber Security Engineer - Application Security Tooling

American Express is seeking an Application Security focused Cybersecurity Engineer to strengthen application security and support engineering teams building and operating secure technology at scale. The role combines cybersecurity engineering, including AI/ML, with application security, software development, automation, and secure SDLC practices.

Role Summary

In this position, you will identify and reduce security risk across the application lifecycle, contribute to the development and operation of security capabilities, and help integrate security testing and controls into engineering workflows. You will also provide technical guidance to support effective remediation, working across modern architectures and CI/CD pipelines.

Key Responsibilities

• Strengthen application security and enable engineering teams to build and operate secure technology at scale.
• Identify, analyze, and reduce security risk throughout the application lifecycle.
• Collaborate with software engineers, architects, product teams, and cybersecurity partners to mitigate security risk across the lifecycle.
• Contribute to the development and operation of security capabilities.
• Integrate security testing and controls into engineering workflows.
• Analyze vulnerabilities and emerging threats.
• Provide technical guidance that enables teams to remediate security issues effectively.
• Address security problems using software engineering, automation, security testing, research, and collaboration.
• Work across modern application architectures, APIs, cloud and container environments, CI/CD pipelines, and application security technologies.
• Support continuous improvement of application security processes, tooling, documentation, and engineering practices to help protect American Express applications, systems, and data.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred.
• Knowledge of regulatory compliance and security standards.
• Knowledge of Application Development & Security and Data Engineering.
• Knowledge of Cloud Security Management.
• Knowledge of Data Privacy & Protection (DPP, GDPR) and Data Security Management.
• Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks.
• Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases.
• Knowledge of core tools used in planning, analyzing, crafting, building, testing, configuring, and maintaining assigned application(s).
• Knowledge of event driven architecture and messaging (Kafka, web hooks, asynchronous API design preferred).
• Experience in application design, software development, and automated testing.
• Experience in object-oriented design and coding with a variety of languages.
• Experience with Agile software development methodologies and practices such as Scrum/Kanban, iterations, and user stories.
• Experience with automation testing and documentation (automated, functional, and performance).
• Experience with testing frameworks including unit testing and regression testing.
• Experience with Java 8+ and Spring Suite Framework preferred.
• Experience with Python and Django framework preferred.
• Experience with React JS, Node JS, and Go-lang preferred.
• Experience with Kubernetes, Docker, Jenkins, and cloud deployment (CI/CD) preferred.
• Experience with PostgreSQL, Oracle, or equivalent relational databases preferred.
• Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, and protection of sensitive enterprise data.
• Knowledge of AI-assisted cybersecurity operations and automation frameworks used to enhance detection, response, and security engineering workflows.
• At least one security-related certification preferred: CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, etc.
• At least one developer-related certification preferred: OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer, etc.
• Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.

Location and Salary

• Location: Phoenix, AZ (onsite)
• Salary: USD 103,750 - 174,750 per year

Relevant Technologies

AI/ML, Python, Bash, PowerShell, Kafka, web hooks, Java, Spring Suite Framework, Django, React JS, Node JS, Go-lang, Kubernetes, Docker, Jenkins, cloud deployment (CI/CD), PostgreSQL, Oracle, NoSQL, relational databases, Scrum, Kanban, unit testing, regression testing, CI/CD, CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer.