Senior App Security Engineer - DevSecOps & AI Governance

American Express Global Business Travel; New York (NY); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Health and welfare insurance

Retirement programs

Travel perks

Learning platform access

Job summary

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We foster an inclusive, collaborative culture where every voice is valued and growth is encouraged.

This role focuses on building secure software and guiding teams in safe AI-enabled coding practices. In this position, you’ll design secure CI/CD pipelines, implement automated security tests, and mentor engineers across teams to uphold a security-first

Qualifications

• 5+ years of professional software development with 3+ years in security/DevSecOps.
• Strong knowledge of OWASP Top 10 and API security.
• Experience with at least one major cloud provider (AWS, Azure, or GCP).

Responsibilities

• Work with DevOps teams to design, implement, and maintain secure CI/CD pipelines with integrated security testing.
• Implement and tune automated security scanning (SAST/DAST/SCA and container scanning).
• Deploy and support API security tools and report findings to a central aggregator.
• Promote secure coding practices and provide security guidance across the development process.
• Evaluate agentic AI programming risks and establish guardrails to mitigate threats.

Skills

Python

Go

Java

JavaScript/TypeScript

DevSecOps

APIs security

Tools

SAST/DAST scanners

WAF

SIEM

Vulnerability scanners

Secrets management

Terraform

Docker

Kubernetes

Helm

Ansible

Job description

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We foster an inclusive, collaborative culture where every voice is valued and growth is encouraged.

This role focuses on building secure software and guiding teams in safe AI-enabled coding practices. In this position, you’ll design secure CI/CD pipelines, implement automated security tests, and mentor engineers across teams to uphold a security-first