Cyber Security Engineer — Build Secure, Scalable Systems

American Express Global Business Travel; Lansing (MI); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion groups

Discretionary annual bonus

Job summary

American Express Global Business Travel is seeking a Cyber Security Engineer to design, implement, and maintain security controls across enterprise systems and cloud deployments. The role requires strong analytical skills, collaboration across teams, and a track record of reducing cyber risk while meeting security standards.

The position emphasizes experience with WAF, SIEM, DLP, endpoints, and APIs, with a focus on auditing, incident response, and continuous security improvements.

Qualifications

• 5+ years of experience in cyber security engineering or related roles.
• Bachelor’s degree in Computer Science, Cyber Security, or related field (or equivalent).
• Certifications such as CISSP, CEH, GSEC, CSSP are preferred.

Responsibilities

• Design, implement, and manage security controls across enterprise systems and networks.
• Deploy and maintain security technologies (WAF, IDS/IPS, SIEM, DLP, Proxy, endpoint protection).
• Configure and troubleshoot security infrastructure for high availability.
• Collaborate with CyberSecurity Architects for planning and implementation.
• Prepare SOPs and participate in change management and incident responses.

Skills

Cyber security

Security engineering

Networking

APIs

REST

Data analytics

English fluency

Problem solving

Education

Bachelor’s degree in Computer Science or Cyber Security

CISSP/CEH/GSEC/CSSP or equivalent

Tools

WAF

IDS/IPS

SIEM

DLP

Proxy

Endpoint protection

Job description

American Express Global Business Travel is seeking a Cyber Security Engineer to design, implement, and maintain security controls across enterprise systems and cloud deployments. The role requires strong analytical skills, collaboration across teams, and a track record of reducing cyber risk while meeting security standards.

The position emphasizes experience with WAF, SIEM, DLP, endpoints, and APIs, with a focus on auditing, incident response, and continuous security improvements.