Cyber Security Engineer – Application Security Tooling, SCA/SAST/DAST/MAST/API Security

American Express

. Design, develop, test, and debug software applications and systems .

Posted 10/9/2026full-timePhoenix • Arizona • United StatesMid-LevelSenior💰 $103,750 - $174,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in software development, security compliance, and automation, with a strong focus on integrating security practices throughout the software development lifecycle. Proficient in utilizing AI-enabled security tools and frameworks to enhance threat detection and operational efficiency.

Highest-signal resume keywords

Software DevelopmentSecurity ComplianceAI Security ConceptsAutomated TestingCloud Security Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Java 8+PythonDjango FrameworkReact JSNode JSGoKubernetesDockerAgile MethodologiesData Security Management

Soft Skills

CollaborationCommunicationProblem-Solving

Tools & Technologies

Spring Suite FrameworkPostgreSQLOracleJenkinsCI/CDKafkaEvent-Driven Architecture

Certifications & Qualifications

CSSLPGWEBGCIHCEHGSECC|ASECCNAOCPOCACKAD

Industry Keywords

CybersecurityRegulatory ComplianceData PrivacyData ProtectionDistributed SystemsAutomation Frameworks

Tech Stack

Tools & technologies

CloudCyber SecurityDjangoDockerJavaJavaScriptJenkinsKafkaKubernetesNode.jsNoSQLOraclePostgresPythonReactSDLCSpringGo

About the role

Key responsibilities & impact

Design, develop, test, and debug software applications and systems
Complete software builds using consistent development practices, tools, common components, and documentation
Perform code reviews, secure code reviews, and automated testing
Support and monitor software across test, integration, and production environments
Follow security and regulatory best practices to ensure software compliance
Collaborate with product and business teams to align technology initiatives with business objectives
Develop and maintain security policies, procedures, and best practices
Integrate security into the software development lifecycle through code reviews and secure coding guidance
Implement encryption technologies to protect sensitive data in transit and at rest
Research emerging security threats, technologies, and disruptive technologies
Test and evaluate new cybersecurity technologies while following SDLC and release-management practices
Draft technical documentation and reports on security assessments, findings, and remediation efforts
Apply AI-enabled security tooling and automation to improve threat detection, investigation efficiency, and operational observability
Implement security controls and monitoring for AI-enabled applications and workflows
Design and refine prompts for AI agent-enabled cybersecurity engineering activities and identify opportunities for Agentic AI workflows

Requirements

What you’ll need

Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
Knowledge of regulatory compliance and security standards
Knowledge of Application Development & Security
Knowledge of Data Engineering
Knowledge of Cloud Security Management
Knowledge of Data Privacy & Protection (DPP, GDPR)
Knowledge of Data Security Management
Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks
Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases
Knowledge of the core tools used in planning, analyzing, crafting, building, testing, configuring, and maintaining assigned applications
Knowledge of event-driven architecture and messaging, including Kafka, webhooks, and asynchronous API design preferred
Experience in application design, software development, and automated testing
Experience in object-oriented design and coding with a variety of languages
Experience in distributed (multi-tiered) systems, algorithms, and relational databases
Experience with Agile software development methodologies and practices such as Scrum/Kanban, iterations, and user stories
Experience in automation testing and documentation, including automated, functional, and performance testing
Experience with unit and regression testing frameworks
Experience with Java 8+ and Spring Suite Framework preferred
Experience with Python and Django framework preferred
Experience with React JS, Node JS, and Go preferred
Experience with Kubernetes, Docker, Jenkins, and cloud deployment/CI/CD preferred
Experience with PostgreSQL, Oracle, or equivalent relational databases preferred
Knowledge of AI security concepts, including generative AI risks, model integrity, prompt security, and sensitive enterprise data protection
Knowledge of AI-assisted cybersecurity operations and automation frameworks
At least one security-related certification preferred, such as CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, or CCNA
At least one developer-related certification preferred, such as OCP, OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, or Professional Cloud Developer
Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship

Benefits

Comp & perks

Bonus
Benefits 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score