Senior Associate - Vulnerability Remediation Management Specialist

American Express • Phoenix, AZ

2d • $89,250 - $150,250

About The Position

American Express is seeking a Senior Associate - Vulnerability Remediation Management Specialist to join the Remediation team within the Penetration Testing function. The role focuses on managing the end-to-end vulnerability lifecycle, coordinating remediation activities, assessing security risks, performing vulnerability retesting, and managing Bug Bounty and Responsible Disclosure Programs.

This is primarily a vulnerability management and remediation coordination role requiring foundational penetration testing knowledge, technical validation capabilities, and strong stakeholder management skills. Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for this position.

Requirements

• Basic understanding of penetration testing methodologies and OWASP Top 10 vulnerabilities.
• Knowledge of vulnerability management, risk assessment, and CVSS scoring.
• Familiarity with security testing tools such as Burp Suite, Nmap, and OWASP ZAP.
• Experience with vulnerability tracking tools such as Jira or ServiceNow.
• Understanding of Bug Bounty and Responsible Disclosure processes.
• Strong communication, analytical, and stakeholder management skills.
• Employment eligibility to work with American Express in the United States.

Nice To Haves

• 3–6 years of experience in cybersecurity, penetration testing, application security, or vulnerability management.
• Hands-on experience in vulnerability validation, remediation tracking, and retesting.
• Certifications such as CEH, eJPT, or CompTIA Security+.

Responsibilities

• Track and manage vulnerabilities identified through penetration testing, Bug Bounty, and Responsible Disclosure Programs.
• Evaluate and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Communicate security findings and remediation recommendations to development teams, ensuring timely resolution within defined SLAs.
• Validate remediation fixes through technical retesting and maintain closure evidence.
• Manage vulnerability submissions, coordinate validation and remediation, and communicate with external security researchers.
• Maintain vulnerability dashboards, track remediation metrics, and provide regular status updates to stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed