Agentic AI Cybersecurity Engineer: IAM Automation

American Express; Phoenix (AZ); On-site; USD 130,000 - 170,000; Full time

Job summary

American Express seeks an experienced Cybersecurity Engineer to join the Identity Access and Lifecycle Management team. You will help ensure first-line defense cybersecurity objectives by partnering with cross-functional teams, engineering automation, and building AI-enabled agents that support self-auditing of controls.

The role emphasizes data-driven control testing, automation, and scalable self-audit capabilities, translating findings into risk-informed recommendations for control owners and

Qualifications

• 2+ years of experience in cybersecurity, control management, technology risk, audit response, automation engineering, or related disciplines.
• Experience designing or supporting automated control testing, continuous control monitoring, automated evidence review, or self-auditing capabilities.
• Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, data protection, and responsible use of AI-enabled workflows.
• Experience creating or configuring AI agents, automation frameworks, or agentic AI workflows used to enhance monitoring, detection, control validation, evidence analysis, and security engineering outcomes.
• Strong engineering mindset with the ability to translate control requirements into automated logic, repeatable tests, data pipelines, dashboards, and agent-enabled workflows.

Responsibilities

• Design, build, and enhance automated metrics that strengthen control effectiveness and enable continuous control monitoring.
• Develop, configure, test, and maintain AI-enabled agents and automation workflows that can evaluate control evidence, identify exceptions, surface control gaps, recommend remediation actions, and support scalable self-auditing capabilities.
• Partner with data, engineering, and technology teams to source, validate, and transform data used in automated control testing and agent-driven analysis.
• Define and track KPIs/KRIs such as control performance trends, exception volumes, agent findings, remediation timeliness, and self-audit coverage.
• Analyze control testing outputs, cybersecurity telemetry, and agent-generated findings to identify trends, anomalies, emerging risks, and opportunities for control improvement.
• Engineer dashboards, reports, and data products that provide clear visibility into control health, self-audit results, exception patterns, and operational risk posture.
• Translate technical findings into concise, risk-informed insights and recommendations for control owners, engineering partners, and leadership stakeholders.
• Identify opportunities to enhance documentation quality, data integrity, and control standardization in accordance with the RCSA framework.
• Support the enhancement of metrics frameworks, automated testing logic, and reporting capabilities to increase repeatability and reduce manual effort.
• Partner with engineering and tooling teams to scale automated testing, monitoring, and agent-enabled self-audit solutions across controls.
• Contribute to automation and efficiency initiatives related to control documentation review, monitoring, metric design, evidence validation, and exception identification.
• Apply AI-enabled security tooling and automation capabilities to improve control observability, evidence review, investigation efficiency, and operational risk visibility.
• Create and implement secure, governed AI agents and workflows that align with enterprise security standards, risk requirements, control objectives, data protection expectations, and responsible AI practices.
• Design and refine prompts, rules, workflows, orchestration logic, validation criteria, and feedback loops that improve AI agent-enabled cybersecurity engineering activities, including control implementation, self-audit execution, exception triage, remediation tracking, control evidence analysis, and security research.
• Apply AI-enabled security tooling and automation capabilities to improve threat detection, investigation efficiency, and operational observability across cybersecurity environments.
• Support the implementation of security controls and monitoring practices for AI-enabled applications and workflows, ensuring alignment with enterprise security standards and risk requirements.

Skills

Cybersecurity

Control management

Automation engineering

AI-enabled workflows

Python

SQL

Data analytics

Threat detection

Stakeholder engagement

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

APIs

Confluence

SharePoint

Slack

Teams

Power BI

Job description

American Express seeks an experienced Cybersecurity Engineer to join the Identity Access and Lifecycle Management team. You will help ensure first-line defense cybersecurity objectives by partnering with cross-functional teams, engineering automation, and building AI-enabled agents that support self-auditing of controls.

The role emphasizes data-driven control testing, automation, and scalable self-audit capabilities, translating findings into risk-informed recommendations for control owners and