Cyber Security Engineer - Application Security Tooling

Cybersecurity Jobs; Phoenix (AZ); On-site; USD 104,000 - 175,000; Full time

Job summary

American Express is seeking a Cyber Security Engineer focused on Application Security Tooling in Phoenix, AZ. The role strengthens application security, supports secure engineering at scale, and brings together cybersecurity engineering, application security, automation, and secure SDLC practices.

Responsibilities include strengthening security across the application lifecycle, identifying risks, partnering with engineering teams, and driving security tooling and automation in modern

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or equivalent experience.
• Advanced degree preferred for senior roles.
• Security certifications (CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA) are a plus.
• Developer certifications (OCP, OCA, OCM, CKAD, ACE, CCSP, Profession Cloud Developer) are beneficial.

Responsibilities

• Strengthen application security and help engineering teams build and operate secure technology at scale.
• Identify and reduce security risk throughout the application lifecycle.
• Partner with software engineers, architects, product teams, and cybersecurity partners to reduce risk.
• Contribute to development and operation of security capabilities.
• Integrate security testing and controls into engineering workflows.
• Analyze vulnerabilities and emerging threats.
• Provide guidance for remediation of security issues.
• Work across modern architectures, APIs, cloud and container environments, CI/CD pipelines.

Skills

Application security

Security testing

Automation

CI/CD

Cloud security

AI/ML security

Agile/Scrum/Kanban

Python

Java

NoSQL/Relational databases

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity

Advanced degree preferred

CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA

OCP, OCA, OCM, CKAD, ACE, CCSP, Profession Cloud Developer

Tools

Python

Bash

PowerShell

Kafka

Django

React JS

Node JS

Go-lang

Kubernetes

Docker

Jenkins

Cloud CI/CD

PostgreSQL

Oracle

Job description

American Express seeks a Cyber Security Engineer focused on Application Security Tooling in Phoenix, AZ. The role strengthens application security, supports secure engineering at scale, and brings together cybersecurity engineering (including AI/ML), application security, automation, and secure SDLC practices.

Responsibilities

• Strengthen application security and help engineering teams build and operate secure technology at scale.
• Identify and reduce security risk throughout the application lifecycle.
• Partner with software engineers, architects, product teams, and cybersecurity partners to identify and reduce security risk across the application lifecycle.
• Contribute to the development and operation of security capabilities.
• Integrate security testing and controls into engineering workflows.
• Analyze vulnerabilities and emerging threats.
• Provide technical guidance that supports effective remediation of security issues.
• Address security problems using a mix of software engineering, automation, security testing, research, and collaboration.
• Work across modern application architectures, APIs, cloud and container environments, CI/CD pipelines, and application security technologies.
• Drive continuous improvement of application security processes, tooling, documentation, and engineering practices to help protect American Express applications, systems, and data.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; an advanced degree is preferred.
• Knowledge of regulatory compliance and security standards.
• Knowledge of Application Development & Security.
• Knowledge of Data Engineering.
• Knowledge of Cloud Security Management.
• Knowledge of Data Privacy & Protection (DPP, GDPR).
• Knowledge of Data Security Management.
• Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks.
• Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases.
• Knowledge of core tools used to plan, analyze, craft, build, test, configure, and maintain assigned application(s).
• Knowledge of event driven architecture and messaging; Kafka, web hooks, and asynchronous API design are preferred.
• Experience in application design, software development, and automated testing.
• Experience in object-oriented design and coding with a variety of languages.
• Experience with Agile software development methodologies and practices such as Scrum/Kanban, iterations, and user stories.
• Experience with automation testing and documentation (automated, functional, and performance).
• Experience with Testing Frameworks, including unit testing and regression testing.
• Experience with Java 8+ and the Spring Suite Framework is preferred.
• Experience with Python and the Django framework is preferred.
• Experience with React JS, Node JS, and Go-lang is preferred.
• Experience with Kubernetes, Docker, Jenkins, and cloud deployment (CI/CD) is preferred.
• Experience with PostgreSQL, Oracle, or equivalent relational databases is preferred.
• Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, and protection of sensitive enterprise data.
• Knowledge of AI-assisted cybersecurity operations and automation frameworks used to enhance detection, response, and security engineering workflows.
• At least one security-related certification is preferred, such as CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, etc.
• At least one developer-related certification is preferred, such as OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer, etc.
• Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.

Technologies

• AI/ML
• Python, Bash, PowerShell
• Kafka, web hooks
• Java, Spring Suite Framework, Django
• React JS, Node JS, Go-lang
• Kubernetes, Docker, Jenkins
• Cloud deployment (CI/CD)
• PostgreSQL, Oracle, NoSQL, relational databases
• Scrum, Kanban
• Unit testing, Regression Testing, CI/CD
• Security certifications (examples listed): CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA
• Developer certifications (examples listed): OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer

Location and Compensation

• Location: Phoenix, AZ (onsite)
• Salary: USD 103,750 - 174,750 per year