Senior Manager, AppSec Research & Threat Intelligence

American Express; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

American Express is seeking a highly technical Senior Manager of Application Security Research to lead advanced security research, vulnerability discovery, and threat analysis across applications, APIs, AI/ML, and emerging tech. You will translate discoveries into actionable intelligence and collaborate with Fusion Center, SOC, and engineering teams.

This hands-on leadership role requires deep reverse engineering, secure code review, and strong mentoring, with responsibility for guiding security

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
• Knowledge of regulatory compliance and security standards
• Knowledge of Identity & Access Management
• Knowledge of Security Architecture Management
• Knowledge of Security Governance and Operations
• Knowledge of Security Testing & Remediation
• Knowledge of Cloud Security Management
• Knowledge of Data Privacy & Protection (DPP, GDPR)
• Knowledge of AI-enabled cybersecurity operations platforms, automated threat detection techniques, and AI-assisted security analytics capabilities
• Understanding of AI security risks, responsible AI governance principles, and the operational implications of AI-enabled technologies within cybersecurity environments
• Experience in cybersecurity operations and application security
• Experience in Technical Writing and Documentation Development
• Experience with SCA/SAST/DAST/MAST/API Security
• Experience in network security, understanding of network security principles
• Experience in vulnerability scanning tools and remediation processes
• Experience with penetration testing for ongoing monitoring and compliance
• Experience in incident response efforts, including forensic analysis, malware analysis, and threat hunting
• Experience in securing cloud environments and implementing cloud security best practices
• Experience in regulatory requirements and standards and their application in cybersecurity operations
• Experience in Business Continuity Planning and Disaster Recovery
• At least one security related certification preferred like: GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GPEN, GXPN, GREM, CEH, C|ASE .NET, C|ASE Java, OSCP, OSWA, OSWE, CSSLP, other

Responsibilities

• Monitors application security systems to identify potential threats and vulnerabilities
• Manages application security platforms and processes
• Promotes the adoption of best practices, new technologies, and innovative solutions
• Oversees vulnerability management and/or application security testing
• Oversees development, implementation, and maintenance of security policies, procedures, and standards
• Plans event response efforts and ensures thorough investigation measures
• Contributes to the development and continuous improvement of the organization’s application security program
• Supports onboarding of new products, data, processes, or tools
• Conducts and manages periodic security assessments and audits
• Provides strategic recommendations to senior leadership
• Provides input on creating security training programs
• Writes, reviews, and directs publishing reports / dashboards / documentation on application security events
• May or may not oversee a team of Cybersecurity Operations & Assurance colleagues
• May or may not provide direct leadership and coaching to Cybersecurity Operations & Assurance teams
• May or may not manage resource allocation, project timeline, and budget for projects
• May or may not collaborate with senior leadership to hire top talent for the team
• Collaborates with teams in product and the business to align technology initiatives with business objectives
• Leads adoption of AI-enabled cybersecurity operations capabilities to improve threat detection and incident response
• Leverages AI-assisted analytics and threat intelligence to enhance security monitoring and remediation
• Provides guidance on the secure and responsible use of AI-enabled technologies within cybersecurity operations
• Establishes and promotes effective Prompt Design practices across the team

Skills

security research

reverse engineering

secure code review

threat analysis

leadership

mentoring

communication

Education

Bachelor's Degree in Computer Science or Cybersecurity

Tools

Nessus

Burp Suite

Qualys

Metasploit

Wireshark

Job description

American Express is seeking a highly technical Senior Manager of Application Security Research to lead advanced security research, vulnerability discovery, and threat analysis across applications, APIs, AI/ML, and emerging tech. You will translate discoveries into actionable intelligence and collaborate with Fusion Center, SOC, and engineering teams.

This hands-on leadership role requires deep reverse engineering, secure code review, and strong mentoring, with responsibility for guiding security