Senior Database Security Engineer

American Express; Phoenix (AZ); On-site; USD 130,000 - 190,000; Full time

Job summary

American Express seeks an experienced Senior Security Automation Engineer to design and scale the Data Access management program across traditional and cloud databases.

You will build AI agent-powered workflows, ingest and analyze logs, and partner with security, engineering, and cloud teams to strengthen data security across platforms.

Qualifications

• Bachelor's degree in a technical field.
• 7+ years in database security or related area.
• 3+ years with GenAI, LLMs, and agentic workflows.
• Strong programming skills in Python, Java, NoSQL, REST API, Spring Boot.
• Experience building AI agents using LangGraph or LangChain.
• Knowledge of MCP, A2A, and agentless monitoring.
• Data engineering basics: ETL, vector databases, log data.
• Experience with AWS and GCP security controls.

Responsibilities

• Expand database activity and access management coverage to new databases and cloud services.
• Design and implement custom database activity and access management solutions.
• Develop scalable pipelines to ingest, normalize, correlate, and analyze logs and telemetry.
• Partner with security, database, cloud, and application teams to scale DAM.
• Evaluate AI, database, and cloud technologies to improve access management.
• Integrate DSPM for data classification and security context.
• Serve as SME for initiatives and drive end-to-end deployments.
• Build AI agent-based automation to correlate events across data sources.
• Create AI agent-based workflows for database access attestation.
• Develop risk-scoring models combining user behavior and threat intel.
• Automate investigations and speed up response times.
• Design dashboards and executive reporting for monitoring and risk posture.

Skills

Python

Java

NoSQL

REST API

Spring Boot

GenAI

LLMs

LangChain

LangGraph

MCP

A2A

Agentless monitoring

Data engineering

ETL pipelines

AWS

GCP

Anomaly detection

Education

BS in CS/Engineering

Job description

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

The Data Security team is responsible for safeguarding the organization’s most critical asset—its data—by ensuring confidentiality, integrity, and availability across all platforms and environments. Working at the intersection of cybersecurity, data governance, and privacy, the Data Security team focuses on capabilities such as data classification, encryption, secure data access, and monitoring. The team partners closely with engineering, risk, and business units to embed security controls throughout the data lifecycle—from creation and storage to sharing and archival.

We are seeking an experienced Senior Security Automation Engineer to design, build, and enhance our next-generation Data Access management (DAM) program spanning traditional, cloud-native, and emerging database technoloy

Responsibilities

• Expand Database activity management and access management coverage to newly introduced databases and cloud data services.
• Design and implement custom database activity and access management solutions for relational, NoSQL, cloud-native, and emerging database platforms.
• Develop scalable pipelines to ingest, normalize, correlate, and analyze database audit logs, cloud-native logs, and security telemetry.
• Partner with security operations, database engineering, cloud engineering, and application teams to implement Database activity management at scale.
• Continuously evaluate emerging AI, database, and cloud technologies to improve access management capabilities.
• Integrate DSPM platforms to enrich Access management and monitoring with data classification, sensitivity labels, ownership metadata, and business context.
• Serve as the technical Subject Matter Expert (SME) for strategic initiatives and provide end-to-end ownership from requirements through production deployment.
• Build AI agent-based automation to correlate events across multiple security data sources and investigate anomalous database activity, unauthorized access detection.
• Build AI agent-based workflows to simplify Database Access attestation processes.
• Develop risk-scoring models that combine user behavior, data sensitivity, privilege level, access patterns and threat intelligence.
• Build automation workflows that reduce manual investigations and improve response times.
• Design dashboards and executive reporting for monitoring coverage, risk posture, and program maturity.

Qualifications

• Bachelor's degree in Computer Science, Artificial Intelligence, Information Security, Data Science, Engineering, or related technical field.
• 7+ years of software engineering in database security or related technical fields.
• 3+ years of experience with GenAI, LLMs, and agentic workflows
• Strong programming skills in Python, Java, NoSQL, REST API, Springboot .
• Experience building AI agents using frameworks such as LangGraph , LangChain or equivalent.
• Experience with Model Context Protocol (MCP) for tool integration and A2A for agent-to-agent collaboration
• Exposure to implementing Agentless Database activity monitoring.
• Solid understanding of data engineering principles, including ETL pipelines, structured/unstructured data management, and vector databases.
• Strong understanding of anomaly detection, classification, and clustering.
• Hands-on experience implementing data security controls in AWS and GCP
• Experience working with large scale log, telemetry, and security datasets.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.