Cybersecurity Engineer I

The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.

Cybersecurity Engineer I builds and implements identity & access management solutions, conducts security assessments, develops security policies, collaborates on secure software development, and stays updated on emerging threats to enhance the organization's cybersecurity posture, with guidance from peers and leaders

• Supports the implementation of identify & access management security solutions that drive least privilege, with guidance from peers and leaders
• Drafts and maintains security documentation to ensure compliance with industry standards and regulatory requirements, with inputs and guidance from peers and leaders
• Collaborates with software development teams to integrate security into the software development lifecycle, including conducting code reviews and providing guidance on secure coding practices
• Conducts research on emerging security threats and technologies to stay updated on the latest developments in the field of cybersecurity
• Co-creates technical documentation and reports on security assessments, findings, and remediation efforts to provide insights and recommendations for improving the organization’s security posture, with inputs and guidance from peers and leaders
• Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
• 1-3 years experience in full stack software engineering & development.
• Hands-on experience in developing enterprise scale custom IAM solutions
• Deep knowledge of programming languages - Python, Java, JavaScript
• Deep knowledge of scripting languages - Bash/Shell, Powershell,
• Working experience in modern SDLC tools & methodologies - Agile, GitHub.
• Knowledge of enterprise RPA solutions (UIPath, BluePrism) & API engineering
• Knowledge of Identity & Access Management (IAM)
• Knowledge of regulatory compliance and security standards
• Knowledge of Application Development & Security and Cloud Security Management
• Knowledge of network protocols (e.g., TCP/IP, DNS, HTTP) and security fundamentals

Licenses and Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• CompTIA Security +