American Expressis hiring aSenior Cybersecurity Engineerwithin its Data Security organization inPhoenix, AZ(onsite). In this role, you will design, develop, and modernizesecure cryptographic serviceswhile applyinggenerative AIandAI-based automationto improve developer productivity and support incident-free operations.
What you’ll do:
Design, develop, and modernizesecure, scalable, and resilient cryptographic services, accelerating AI-enabled engineering and intelligent automation.
ApplyGenerative AIandAI-based automationacross engineering and operational workflows to improve developer productivity.
Automate vulnerability remediationto reduce time-to-fix and reliance on manual work.
Proactively identify and remediate issues whilereducing manual intervention.
Advance the organization’s journey towardincident-free operationsthrough improved automation and operational workflows.
What you bringBachelor’s degreein Computer Science, Computer Engineering, Software Engineering, or equivalent practical experience.
7+ yearsof professional software development experience.
2+ yearsleading software developers, includingtechnical mentoringand design guidance.
5+ yearsof experience withinFinancial Servicesor another highly regulated industry.
5+ yearsbuilding APIs, microservices, or backend applications usingJava, Python, Go, JavaScript/TypeScript, or similar languages.
5+ yearsdeveloping or consumingREST and/or SOAPservices.
2+ yearshands-on experience withGCP , AWS , Azure, or private/hybrid cloud platforms.
2+ yearsexperience withKubernetes , Docker, containerization, service mesh, or related cloud-native technologies.
2+ yearsdeveloping solutions involvingPKI, symmetric/asymmetric cryptography, encryption, tokenization, digital certificates, or cryptographic key management.
2+ yearsexperience withHashiCorp Vault , KMS , HSM, or comparable secrets/key management technologies.
Hands-on experience integratingLLMsorGenerative AIinto applications, software engineering workflows, or operational automation.
Hands-on experience withAI agents , Retrieval-Augmented Generation (RAG) , LLM APIs , prompt engineering , agentic workflows, or similar Generative AI patterns.
Experience applying AI to engineering and operational use cases such as incident detection, root-cause analysis, vulnerability remediation, observability, automated remediation, or recovery.
Deep understandingof PKI architecture, certificate lifecycle management, cryptographic key lifecycle management, TLS/mTLS, encryption, digital signatures, and secure communication protocols.
Experience designinghighly available enterprise PKIor cryptographic services.
Experience integrating applications withHSMs, enterprise PKI, HashiCorp Vault, cloud KMS, and certificate management platforms.
Strong understanding ofAPI security , OAuth/OIDC, authentication, and authorization.
Experience withDevSecOps , CI/CD, automated security testing, observability, and infrastructure automation.
Understanding of security, privacy, access control, andresponsible AIconsiderations for enterprise AI solutions.
Tools and technologiesJava, Python, Go, JavaScript/TypeScript, REST, SOAP
GCP, AWS, Azure, Kubernetes, Docker, service mesh
PKI, symmetric/asymmetric cryptography, encryption, tokenization, digital certificates, cryptographic key management
HashiCorp Vault, KMS, HSM
LLMs, Generative AI, AI agents, Retrieval-Augmented Generation (RAG), LLM APIs, prompt engineering, agentic workflows
OAuth/OIDC, TLS/mTLS, DevSecOps, CI/CD, automated security testing, observability, infrastructure automation
Compensation: USD123,000 - 215,250per year.