You Lead the Way. We've Got Your Back.

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we are supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what is possible - and we are proud to back each other every step of the way. When you join #TeamAmex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day.

American Express is seeking an Engineer with proven strong technical competence in building and implementing application security solutions. You will be part of a fast-paced team responsible for developing and delivering products and components focused on application security. You will be challenged with identifying innovative ideas and proof of concept to deliver against the existing and future needs. This role primarily involves performing DevOps activity in the team which manages high scalable enterprise applications. You will be working on integrating "off-the-shelf" Application Security solutions into the environment.

This role is an opportunity to join a highly sophisticated and advanced Information Security organization of over 800 people. Within the cyber security world, AMEX has made huge investments into protecting their brand. This is a high visibility program, with backing from high level leadership in the organization.

Primary Responsibilities

• Design, develop, solve problems, debug, evaluate, modify, deploy, and document software and systems that meet the needs of customer-facing applications, business applications, and/or internal end user applications.
• Beginner level ability in software development, such coding assignments
• Function as member of an agile team by contributing to software builds through consistent development practices (tools, common components, and documentation)
• Participate in code reviews and automated testing
• Debug basic software components and identify code defects for remediation
• Enable the deployment, support, and monitoring of software across test, integration, and production environments
• Automate deployments in test or production environments
• Automatically scale applications based on demand projections
• Assist in the development of threat modeling COTS and customization.
• Develops reports and metrics for management concerning residual risk and non-compliance.
• Provides technical support to Develop, Maintain, Update, and enhance secure design patterns and secure coding standards.
• Provides technical support to Develop, Maintain, update, and enhance threat libraries.
• Provides technical support to assist application teams with threat modeling consultancy questions.
• Consistently enable strong developer and customer experience when liaising with application teams. Uphold Blue Box values when liaising with application teams.
• Demonstrate increased self-reliance to achieve team goals
• Influence team members with creative changes and improvements by challenging the status quo and demonstrating risk taking

As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers' digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. Amex offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.

• Bachelor's degree in computer science, information systems, cybersecurity, or a related field.
• Overall 6+ years of industry experience with 4-5 Years of relevant experience
• Technical and Security Experience
• Experience with Java Development - ability to manage internally written Java programs and light weight Java programming (REST API programming).
• Experience in Docker Containerization - understand how to containerize an application, write a docker file, pull an application from GitHub and containerize it.
• Experience in Automation - Experience writing scripts from scratch that have been used specifically for automation. Ideally shell but any language will work
• Full stack knowledge of application architectures including Single Page Applications, REST APIs
• Experience with Go, Java, Kotlin, JavaScript
• Full stack knowledge or familiarity with database architectures including Postgres, NoSQL Databases.
• Experience working with public cloud services (preferably AWS or GCP) and a proven track record of building complex infrastructure
• Strong hands-on deployment and troubleshooting expertise working with private cloud (OpenShift, Kubernetes, Docker)
• Demonstrated professional expertise in a large Fortune 100 company running an IT Production Operation at scale including Infrastructure (Servers, Network, Storage, Security) and Applications (Distributed, Middleware, Databases across all tiers)
• Continuous delivery experience/DevOps/Agile
• Familiar with Agile or other rapid application development methods
• Experience with design and coding across one or more platforms and languages as appropriate
• Hands-on expertise with application design, software development and automated testing
• Experience with distributed (multi-tiered) systems, algorithms, and relational databases
• Confirmed experience with object-oriented design and coding with variety of languages
• Ability to work with Infrastructures and Platforms including IaaS, PaaS, Cloud technologies and tools for Continuous Integration (CI) and Continuous Delivery (CD)
• Good understanding of web technologies
• At least medium level expertise in one of following: Python/ shell scripting, Golang and Rest API
• Desirable experience - Splunk, ELK, Node.js, Java, JBoss, WAS, Ansible, Puppet, Cloud management and administration
• Other skills
  • Proven diagnostic, troubleshooting, and service restoration skills.
  • Excellent interpersonal skills, customer service skills, and English communication skills with difficult customers in outage situations.
  • Metrics management

Key Behaviors/Competencies

• Self-directed, Confident Team Player
• Strong Technical Thinker
• Strong Planning, Execution and Collaborative skills
• Communication skills - Good verbal and written communication skills. Ability to document risk and control summary artifacts that translates complex threat models into easy-to-read reports for the business.
• Openness to Learning: Takes personal responsibility for learning and upskilling. Acquires strategies for gaining new knowledge, behaviors, and skills. Builds on and applies existing knowledge. Engages in learning from others, inside and outside the organization.
• Adaptability: Demonstrates flexibility within a variety of changing situations, while working with individuals and groups. Changes his or her own ideas or perceptions in response to changing circumstances.
• Business Acumen: Demonstrates an awareness of American Express internal dynamics.

We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

If the role you are applying for is designated as hybrid or onsite, you will be required to demonstrate that you have completed your primary COVID-19 vaccination series (i.e., 2 doses for Moderna/Pfizer and 1 dose for J&J) in order to work in or visit any of our offices. This requirement is subject to legally required accommodations.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, age, or any other status protected by law.