Cybersecurity Engineer

American Express•Atlanta, GA

9h•$89,250 - $150,250

About The Position

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights. At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. The Cloud and SaaS Security mission is to enable secure, rapid cloud and SaaS transformation that accelerates business growth and innovation. We provide trusted, real-time visibility and high-quality security intelligence, empowering leaders to make informed, risk-aware decisions at speed. By positioning security as a strategic enabler, we help the enterprise modernize with confidence, resilience, and agility. The Engineer will be part of mainstream to establish comprehensive, end-to-end visibility across all cloud and SaaS environments by integrating with core systems of record into CNAPP, delivering a unified and consistent telemetry layer across platforms. Our focus is to provide accurate, prioritized, and actionable insights that reduce noise and enable effective decision-making. Democratize access to security intelligence, ensuring teams have the right context to act quickly and independently, while maintaining alignment with enterprise risk and governance standards. By embedding security leveraging Policy-as-a-Code capability seamlessly into cloud and SaaS adoption journeys, we enable speed without compromise driving scalable, secure, and efficient operations across the organization. How will you make an impact in this role? As part of this transformation, we are building a next-generation multi-cloud security platform and are seeking a CNAPP-focused engineer to drive visibility, risk reduction, and secure cloud adoption at scale. This role will play a critical part in shaping the enterprise security posture across AWS, Azure, GCP, and private cloud environments (e.g., OpenShift). In this role, you will operate within a DevSecOps model, partnering closely with Technology Risk and Information Security (TRIS), Cloud Security Governance, Cloud Security Operations, and engineering teams across the organization. You will help identify, design, and deliver scalable security capabilities that are deeply integrated into cloud platforms and developer workflows. You will drive a strong automation-first mindset, enabling zero-touch, idempotent, and scalable solutions through everything-as-code across infrastructure, security controls, and platform services. Success in this role requires the ability to operate across multiple initiatives, prioritize effectively, and translate evolving security and cloud technologies into practical, enterprise-ready solutions. We are looking for a highly motivated, forward-thinking engineer who can balance technical depth with execution discipline, contribute to the maturation of end-to-end security capabilities, and ensure a seamless and secure experience for our engineering community. At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Requirements

CNAPP-focused engineer
Experience with AWS, Azure, GCP, and private cloud environments (e.g., OpenShift)
Experience operating within a DevSecOps model
Experience with Policy-as-a-Code
Strong automation-first mindset
Ability to operate across multiple initiatives
Ability to prioritize effectively
Ability to translate evolving security and cloud technologies into practical, enterprise-ready solutions
Technical depth
Execution discipline

Responsibilities

Establish comprehensive, end-to-end visibility across all cloud and SaaS environments by integrating with core systems of record into CNAPP.
Deliver a unified and consistent telemetry layer across platforms.
Provide accurate, prioritized, and actionable insights that reduce noise and enable effective decision-making.
Democratize access to security intelligence, ensuring teams have the right context to act quickly and independently.
Embed security leveraging Policy-as-a-Code capability seamlessly into cloud and SaaS adoption journeys.
Drive visibility, risk reduction, and secure cloud adoption at scale.
Shape the enterprise security posture across AWS, Azure, GCP, and private cloud environments (e.g., OpenShift).
Operate within a DevSecOps model, partnering closely with Technology Risk and Information Security (TRIS), Cloud Security Governance, Cloud Security Operations, and engineering teams.
Identify, design, and deliver scalable security capabilities that are deeply integrated into cloud platforms and developer workflows.
Drive a strong automation-first mindset, enabling zero-touch, idempotent, and scalable solutions through everything-as-code across infrastructure, security controls, and platform services.
Operate across multiple initiatives, prioritize effectively, and translate evolving security and cloud technologies into practical, enterprise-ready solutions.
Contribute to the maturation of end-to-end security capabilities.
Ensure a seamless and secure experience for our engineering community.