Senior Associate - Vulnerability Remediation Management Specialist

American Express • Phoenix, AZ

1d

About The Position

The Senior Associate - Vulnerability Remediation Management Specialist will join the Remediation team within American Express’s Penetration Testing function. The role focuses on managing the end-to-end vulnerability lifecycle, coordinating remediation activities, assessing security risks, performing vulnerability retesting, and managing Bug Bounty and Responsible Disclosure Programs. It is primarily a vulnerability management and remediation coordination role requiring foundational penetration testing knowledge, technical validation capabilities, and strong stakeholder management skills.

The position is part of the Information Security organization, which supports customer and colleague experiences through trust, service, and security. Employment eligibility to work in the United States is required; American Express will not pursue visa sponsorship for this position.

Requirements

• Basic understanding of penetration testing methodologies and OWASP Top 10 vulnerabilities.
• Knowledge of vulnerability management, risk assessment, and CVSS scoring.
• Familiarity with security testing tools such as Burp Suite, Nmap, and OWASP ZAP.
• Experience with vulnerability tracking tools such as Jira or ServiceNow.
• Understanding of Bug Bounty and Responsible Disclosure processes.
• Strong communication, analytical, and stakeholder management skills.
• Eligibility to work in the United States; visa sponsorship will not be pursued.

Nice To Haves

• 3–6 years of experience in cybersecurity, penetration testing, application security, or vulnerability management.
• Hands-on experience in vulnerability validation, remediation tracking, and retesting.
• Certifications such as CEH, eJPT, or CompTIA Security+.

Responsibilities

• Track and manage vulnerabilities identified through penetration testing, Bug Bounty, and Responsible Disclosure Programs.
• Evaluate and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Communicate security findings and remediation recommendations to development teams, ensuring timely resolution within defined SLAs.
• Validate remediation fixes through technical retesting and maintain closure evidence.
• Manage vulnerability submissions, coordinate validation and remediation, and communicate with external security researchers.
• Maintain vulnerability dashboards, track remediation metrics, and provide regular status updates to stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed