Cyber Security Engineer

American Express Global Business Travel

10d•$104,300 - $193,700•Onsite

About The Position

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued. The Cyber Security Engineer is responsible for designing, implementing, and maintaining security controls that protect the organization’s systems, data, and infrastructure. This role requires strong technical expertise, analytical thinking, and the ability to collaborate across teams to reduce cyber risk and ensure compliance with security standards. Cyber Security Engineers play a critical role in deploying security tools, maintaining security technologies, and continuously improving the organization’s security posture.

Requirements

~5+ years of experience in cyber security engineering or related roles
Bachelor’s degree in Computer Science, Cyber Security, or related field (or equivalent experience) such as CISSP, CEH, GSEC, CSSP
Curiosity and passion for problem solving
Fluent in English
Inclusive, collaborative, and able to work seamlessly with a multicultural and international team
Building real time analytics and data pipeline from different sources
Developing micro-service using rest framework
Exposing and consuming data using APIs
Network security and networking technologies
Operating system and database security
Security monitoring and logging tools

Responsibilities

Design, implement, and manage security controls across enterprise systems and networks
Deploy and maintain security technologies such as WAF, IDS/IPS, SIEM, DLP, Proxy, and endpoint protection tools
Configure and troubleshoot security infrastructure to ensure high availability and effectiveness
Estimate technical effort, work breakdown structure, risks, and dependencies
Analyze and resolve technical problems
Establish and promote design guidelines and standards
Experiment with new and emerging technologies
Working with CyberSecurity Architects team for the planning, proposal and implementation of security controls and platforms.
Working knowledge in the field of CyberSecurity, including but not limited to Cloud deployments, application integration, and APIs.
Project level experience working in a team environment with multiple parallel workflows, team members, Project Managers, and defined deliverables.
Identify and define system security requirements including requirements for achieving audit requirements.
Preparing and documenting standard operating procedures and protocols for the Projects and workflows that the Engineer is participating in for the team.
Configure and troubleshoot security infrastructure devices as necessary for a smooth and highly available set of controls.
In a team environment, develop technical solutions and deploy security tools to help mitigate security vulnerabilities and automate repeatable tasks
Troubleshooting and diagnostic skills for the purpose of providing long term actionable solutions and remediation of issues.
Responding to and participating in incidents as a representative of the CyberSecurity Engineering team.
Ensuring that the organization's data and infrastructure are protected by enabling and maintaining security controls. This includes Gap Analysis as necessary.
Participating in the change management process
Daily administrative tasks, reporting and communication with the relevant stakeholders, managers and directors.
Delivering comprehensive reports including assessment-based findings, outcomes and solutions for increased system security enhancements
Working as part of a team with similarly tasked Engineers and Analysts in a diverse, engaging, supportive and respectful manner