Senior Cybersecurity Engineer I

The job posting is for an existing vacancy. 

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries 
• Bonus incentives 
• Support for financial-well-being and retirement 
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) 
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 
• Generous paid parental leave policies (depending on your location) 
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) 
• Free and confidential counseling support through our Healthy Minds program 
• Career development and training opportunities

American Express is committed to providing an inclusive and accessible work environment in which all people who apply for positions or who work for or on behalf of Amex are treated with dignity and respect and are provided with equal treatment with respect to employment, regardless of that person's age, sex, sexual orientation, gender identity, gender expression, race, colour, ancestry, ethnic or national origin, citizenship, religion or creed, marital status, family status, pregnancy, disability, record of offences, social condition or origin, political beliefs, association or activity or other factors prohibited under applicable Human Rights legislation (the "Prohibited Grounds").   If you have a disability and need accommodation, please speak with the Recruiter for more information.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

We are seeking a senior engineer to design, build, and enhance the engineering foundations that support the Threat Modelling and Application Security platforms. This role focuses on creating scalable SaaS and GenAI-enabled capabilities that improve how security services are delivered across the enterprise.

Key Responsibilities

• Design and deliver secure, resilient, and scalable platform services supporting Threat Modelling and other security functions.
• Modernize and migrate existing on-prem components into SaaS or cloud-native solutions.
• Build APIs, automation pipelines, and integrations that streamline workflows across tools and teams.
• Develop and integrate agentic and GenAI-driven solutions to enhance automation, analysis, and knowledge management.
• Implement secure LLM operations including data handling, prompt governance, and output validation.
• Champion engineering best practices (CI/CD, IaC, observability, automated testing).
• Collaborate closely with Threat Modelling, AppSec, and architecture teams to align engineering delivery with strategic objectives.

• Provide technical guidance and mentorship to engineers and contractors.

Required Skills & Experience

• Strong software engineering background (Python, Java, , or similar).
• Proven experience building and operating SaaS or cloud-native platforms (Azure or AWS preferred).
• Hands-on experience with GenAI or LLM frameworks (e.g., Azure OpenAI, LangChain, or agentic systems).
• Deep understanding of secure software development and data protection.
• Experience with CI/CD, containers (Docker/Kubernetes), and observability tooling.

Desirable

• Background in security engineering, threat modelling, or application security.

• Experience with security tooling integrations (e.g., Irius Risk, Jira, ServiceNow).

• Familiarity with AI governance and responsible AI practices.

• Strong collaboration and communication skills across multidisciplinary teams.

• Cloud Architecture – e.g. Microsoft Azure Solutions Architect Expert, AWS Solutions Architect Professional, or GCP Professional Cloud Architect.

• (ISC)² CCSP – Cloud Certified Security Professional.

• AI / ML Engineering – e.g. Microsoft AI-102 (Azure AI Engineer Associate), Google Professional Machine Learning Engineer, or AWS Machine Learning Specialty.

• Threat Modeling / Security Design – e.g. Certified Threat Modeling Professional (CTMP) or SANS SEC540.

Success Indicators

• Delivery of secure, scalable platform capabilities adopted by Threat Modelling and security teams.
• Demonstrated improvement in automation and operational efficiency.
• Integration of GenAI capabilities that enhance service quality and delivery speed.
• Positive cross-team feedback on collaboration, technical depth, and delivery outcomes.