Remote Senior Application Security Engineer

American Express Global Business Travel; Northern (KY); Hybrid; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits by country

Travel perks

Learning platform access

Job summary

Amex GBT is seeking a Senior Application Security Engineer to join a remote, cloud-native security team. You will integrate security into the software lifecycle, design secure CI/CD pipelines, and guide engineers on secure coding practices.

Ideal candidates bring 5+ years of software development and 3+ years in security, with expertise in OWASP Top 10, cloud security (AWS/Azure/GCP), and AI tooling governance. The role offers global travel perks and a learning platform.

Qualifications

• 5+ years of professional software development with Python/Go/Java/JS/TS.
• 3+ years in application security or DevSecOps.
• Strong knowledge of OWASP Top 10 and API security; cloud security expertise.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines with integrated security testing.
• Deploy and tune SAST/DAST/DAST scanners and container scanning.
• Govern API security, authentication, and secure design practices across teams.
• Mentor engineers and promote a security-first culture in development workflows.
• Evaluate guardrails for agentic AI coding tools and mitigate AI-specific risks.

Skills

Python

Go

Java

JavaScript/TypeScript

DevSecOps

OWASP Top 10

Cloud security

CI/CD pipelines

Agentic AI tools

Threat modeling

Education

Bachelor's degree in Computer Science or related field

Security certifications (CISSP, GIAC, OSCP, AWS Security Specialty)

Tools

SAST/DAST scanners

WAF

SIEM

Terraform

Docker

Kubernetes

Jenkins

GitHub Actions

CircleCI

Cloud platforms (AWS/Azure/GCP)

Job description

Amex GBT is seeking a Senior Application Security Engineer to join a remote, cloud-native security team. You will integrate security into the software lifecycle, design secure CI/CD pipelines, and guide engineers on secure coding practices.

Ideal candidates bring 5+ years of software development and 3+ years in security, with expertise in OWASP Top 10, cloud security (AWS/Azure/GCP), and AI tooling governance. The role offers global travel perks and a learning platform.