oracle
Senior Manager - Application Security Research
American Express
Phoenix, USA
Full-time
Senior
Hybrid
Discovered 2 days ago
awsazuregcpjavasql
Key Skills for This Role
awsazuregcpjavasql
Full Job Posting
Qualifications
- Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
- Knowledge of regulatory compliance and security standards
- Knowledge of Identity & Access Management
- Knowledge of Security Architecture Management
- Knowledge of Security Governance and Operations
- Knowledge of Security Testing & Remediation
- Knowledge of Cloud Security Management
- Knowledge of Data Privacy & Protection (DPP, GDPR)
- Knowledge of AI-enabled cybersecurity operations platforms, automated threat detection techniques, and AI-assisted security analytics capabilities
- Understanding of AI security risks, responsible AI governance principles, and the operational implications of AI-enabled technologies within cybersecurity environments
- Experience in cybersecurity operations and application security
- Experience in Technical Writing and Documentation Development
- Experience with SCA/SAST/DAST/MAST/API Security
- Experience in network security, understanding of network security principles, including firewalls, VPNs, and network segmentation
- Experience in vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and remediation processes
- Experience with penetration testing using industry-standard tools (e.g., Burp Suite, Wireshark, Metasploit, SQL map) for ongoing monitoring and compliance
- Experience in working on incident response efforts, including forensic analysis, malware analysis, and threat hunting
- Experience in securing cloud environments (e.g., AWS, Azure, Google Cloud) and implementing cloud security best practices
- Experience in regulatory requirements and standards (e.g., PCI-DSS, ISO 27001, NIST) and their application in cybersecurity operations
- Experience in Business Continuity Planning and Disaster Recovery
- At least one security related certification preferred like: GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GPEN, GXPN, GREM, CEH, C|ASE.NET, C|ASE Java, OSCP, OSWA, OSWE, CSSLP, other
- Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.
Responsibilities
- Monitors application security systems to identify potential threats and vulnerabilities, ensuring timely detection and prevention of software security defects
- Manages application security platforms and processes, serving as a subject matter expert to ensure robust protection and compliance with industry standards
- Promotes the adoption of best practices, new technologies, and innovative solutions within the team, fostering continuous improvement and a culture of excellence
- Oversees vulnerability management and/or application security testing to ensure remediation priorities align with organizational risk management strategies
- Oversees development, implementation, and maintenance of security policies, procedures, and standards to ensure compliance with industry best practices and regulatory requirements
- Plans event response efforts and ensures thorough investigation measures, remediation, and communication with stakeholders
- Contributes to the development and continuous improvement of the organization's application security program, ensuring alignment with regulatory requirements and business objectives set by senior leadership
- Supports the onboarding of new products, data, processes, or tools by identifying requirements and integrating them into operations (processes, playbooks, and training)
- Conducts and manages periodic security assessments and audits to identify vulnerabilities and risks and develop mitigation strategies
- Provides strategic recommendations to senior leadership to align on key security objectives, policies and integration of security measures into business processes
- Provides key inputs on creating security training programs, provides gap analysis and suggested learning interventions to increase awareness in application security best practices
- Writes, reviews, and directs colleagues on publishing reports / dashboards / documentation on application security events, findings, and recommendations for improvements, providing valuable insights for management and stakeholders
- May or may not oversee and mentor a team of Cybersecurity Operations & Assurance colleagues, enabling a culture of continuous learning, growth opportunities, and inclusivity for individual colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards
- May or may not provide direct leadership and coaching to Cybersecurity Operations & Assurance teams, supporting training and development of best practices
- May or may not manage resource allocation, project timeline, and budget for projects, ensuring alignment with organizational goals
- May or may not collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit, implementing strategies for talent retention and professional development
- Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objective
- Leads adoption of AI-enabled cybersecurity operations capabilities to improve threat detection, incident response efficiency, vulnerability prioritization, and operational decision-making across security processes, while ensuring appropriate validation of AI-generated outputs before operational use
- Leverages AI-assisted analytics, threat intelligence, and workflow automation tools to enhance security monitoring, threat hunting, reporting, and remediation activities while maintaining appropriate governance and oversight, and validation of AI-generated findings, recommendations, and decisions
- Provides guidance on the secure and responsible use of AI-enabled technologies within cybersecurity operations, including expectations for validating AI-generated outputs, ensuring alignment with organizational policies, regulatory requirements, and risk management strategies
- Establishes and promotes effective Prompt Design practices across the team, guiding colleagues in the use of structured prompts to improve threat detection, incident response, operational reporting, threat intelligence analysis, and cybersecurity workflow efficiency while ensuring appropriate human oversight and validation
Preferred Qualifications
- Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
- At least one security related certification preferred like: GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GPEN, GXPN, GREM, CEH, C|ASE.NET, C|ASE Java, OSCP, OSWA, OSWE, CSSLP, other
About American Express
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at American Express
Manager, Digital Corporate Deployment
Minneapolis, USA
ManagerFull-time
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering diff
Discovered TodayView →
AI Engineer III
Sunrise, USA
MidFull-time
Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range o
Discovered TodayView →
Associate-Tech Ops Support
New York City, USA
SeniorFull-time
You Lead the Way. We’ve Got Your Back. At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial conf
Discovered TodayView →
Manager-Digital Product Management
Atlanta, USA
ManagerFull-time
Create the World's Best Digital Colleague Experience The Digital Workplace Product Group within the Technology organization at American Express is responsible for delivering secure, scalable, and modern collaboration cap
Discovered TodayView →
Data Engineer III
, USA
MidFull-time
Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range o
Discovered TodayView →
Manager, Digital Corporate Deployment
Minneapolis, USA
Discovered TodayFull-time
AI Engineer III
Sunrise, USA
Discovered TodayFull-time
Associate-Tech Ops Support
New York City, USA
Discovered TodayFull-time
Manager-Digital Product Management
Atlanta, USA
Discovered TodayFull-time
Data Engineer III
, USA
Discovered TodayFull-time
Manager-Business Development
, USA
Discovered TodayFull-time
AI Engineer III
Sunrise, USA
Discovered TodayFull-time
Sr Data Engineer - Financial Data Engineering
Phoenix, USA
Discovered TodayFull-time