Cyber Security Engineer - Application Security Tooling

American Express seeks a Cyber Security Engineer focused on Application Security Tooling in Phoenix, AZ. The role strengthens application security, supports secure engineering at scale, and brings together cybersecurity engineering (including AI/ML), application security, automation, and secure SDLC practices.

Responsibilities

• Strengthen application security and help engineering teams build and operate secure technology at scale.
• Identify and reduce security risk throughout the application lifecycle.
• Partner with software engineers, architects, product teams, and cybersecurity partners to identify and reduce security risk across the application lifecycle.
• Contribute to the development and operation of security capabilities.
• Integrate security testing and controls into engineering workflows.
• Analyze vulnerabilities and emerging threats.
• Provide technical guidance that supports effective remediation of security issues.
• Address security problems using a mix of software engineering, automation, security testing, research, and collaboration.
• Work across modern application architectures, APIs, cloud and container environments, CI/CD pipelines, and application security technologies.
• Drive continuous improvement of application security processes, tooling, documentation, and engineering practices to help protect American Express applications, systems, and data.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; an advanced degree is preferred.
• Knowledge of regulatory compliance and security standards.
• Knowledge of Application Development & Security.
• Knowledge of Data Engineering.
• Knowledge of Cloud Security Management.
• Knowledge of Data Privacy & Protection (DPP, GDPR).
• Knowledge of Data Security Management.
• Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks.
• Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases.
• Knowledge of core tools used to plan, analyze, craft, build, test, configure, and maintain assigned application(s).
• Knowledge of event driven architecture and messaging; Kafka, web hooks, and asynchronous API design are preferred.
• Experience in application design, software development, and automated testing.
• Experience in object-oriented design and coding with a variety of languages.
• Experience with Agile software development methodologies and practices such as Scrum/Kanban, iterations, and user stories.
• Experience with automation testing and documentation (automated, functional, and performance).
• Experience with Testing Frameworks, including unit testing and regression testing.
• Experience with Java 8+ and the Spring Suite Framework is preferred.
• Experience with Python and the Django framework is preferred.
• Experience with React JS, Node JS, and Go-lang is preferred.
• Experience with Kubernetes, Docker, Jenkins, and cloud deployment (CI/CD) is preferred.
• Experience with PostgreSQL, Oracle, or equivalent relational databases is preferred.
• Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, and protection of sensitive enterprise data.
• Knowledge of AI-assisted cybersecurity operations and automation frameworks used to enhance detection, response, and security engineering workflows.
• At least one security-related certification is preferred, such as CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, etc.
• At least one developer-related certification is preferred, such as OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer, etc.
• Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.

Technologies

• AI/ML
• Python, Bash, PowerShell
• Kafka, web hooks
• Java, Spring Suite Framework, Django
• React JS, Node JS, Go-lang
• Kubernetes, Docker, Jenkins
• Cloud deployment (CI/CD)
• PostgreSQL, Oracle, NoSQL, relational databases
• Scrum, Kanban
• Unit testing, Regression Testing, CI/CD
• Security certifications (examples listed): CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA
• Developer certifications (examples listed): OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer

Location and Compensation

• Location: Phoenix, AZ (onsite)
• Salary: USD 103,750 - 174,750 per year