Cybersecurity Engineer

Overview

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success.

Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

The Cloud and SaaS Security mission is to enable secure, rapid cloud and SaaS transformation that accelerates business growth and innovation. We provide trusted, real-time visibility and high-quality security intelligence, empowering leaders to make informed, risk‑aware decisions  positioning security as a strategic enabler, we help the enterprise modernize with confidence, resilience, and agility.

The Engineer will establish comprehensive, end-to-end visibility across all cloud and SaaS environments by integrating with core systems into CNAPP, delivering a unified and consistent telemetry layer across platforms.

As part of this transformation, we are building a next-generation multi‑cloud security platform and are seeking a CNAPP-focused engineer to drive visibility, risk reduction, and secure cloud adoption s role will play a critical part in shaping the enterprise security posture across AWS, Azure, GCP, and private cloud environments (e.g., Open Shift).

In this role, you will operate within a Dev Sec Ops  model, partnering closely with Technology Risk and Information Security, Cloud Security Governance, Cloud Security Operations, and engineering teams across the organization. You will help identify, design, and deliver scalable security capabilities that are deeply integrated into cloud platforms and developer workflows.

You will drive a strong automation‑first mindset, enabling zero‑touch, idempotent, and scalable solutions through everything‑as‑code across infrastructure, security controls, and platform services.

• Manage CNAPP platform configurations, triage challenge identity risks and alerts, and drive remediation with engineering teams.
• Investigate and correlate security signals across multi‑cloud environments (AWS, GCP, Azure, Open Shift) to identify high‑risk exposures and prioritize actions based on business impact and exploitability.
• Work closely with PaC and guardrails teams to enforce secure‑by‑default configurations across cloud platforms for the CNAPP findings.
• Contribute to proof‑of‑concept efforts by evaluating new CNAPP features, cloud security tools, and container security capabilities, and recommending scalable adoption strategies.
• Document solutions, patterns, and learnings through runbooks, ADRs, and knowledge‑sharing sessions to enable broader team adoption.
• Act as a go‑to technical resource, supporting application teams in designing secure cloud‑native architectures and troubleshooting security‑related issues.
• Work closely with Cloud Engineering and Dev Ops teams to embed security controls into CI/CD pipelines, ensuring shift‑left security and continuous compliance.
• Support onboarding of new cloud accounts,…