Senior Manager – Application Security Research

American Express

. Monitor application security systems to identify threats and vulnerabilities and prevent software security defects .

Posted 10/24/2026full-timeUnited StatesSenior💰 $123,000 - $215,250 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsJava.NET

About the role

Key responsibilities & impact

Monitor application security systems to identify threats and vulnerabilities and prevent software security defects
Manage application security platforms and processes as a subject matter expert
Promote best practices, new technologies, and innovative security solutions
Oversee vulnerability management and application security testing, aligning remediation with organizational risk
Develop, implement, and maintain security policies, procedures, and standards
Plan event response, investigation, remediation, and stakeholder communication
Develop and improve the application security program in alignment with regulatory requirements and business objectives
Support onboarding of new products, data, processes, and tools into operations, playbooks, and training
Conduct and manage security assessments and audits and develop mitigation strategies
Provide strategic security recommendations to senior leadership
Contribute to security training programs, gap analysis, and learning interventions
Write, review, and direct publication of reports, dashboards, and documentation on application security events and findings
May oversee and mentor Cybersecurity Operations & Assurance colleagues
May provide leadership and coaching to cybersecurity teams
May manage project resources, timelines, and budgets
May collaborate with senior leadership on hiring, retention, and professional development
Collaborate with product and business teams to align technology initiatives with business objectives
Lead adoption of AI-enabled cybersecurity operations for threat detection, incident response, vulnerability prioritization, and decision-making
Leverage AI-assisted analytics, threat intelligence, and workflow automation for monitoring, threat hunting, reporting, and remediation
Guide secure and responsible use of AI-enabled technologies with governance and human validation
Establish and promote Prompt Design practices for cybersecurity workflows

Requirements

What you’ll need

Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
Knowledge of regulatory compliance and security standards
Knowledge of Identity & Access Management
Knowledge of Security Architecture Management
Knowledge of Security Governance and Operations
Knowledge of Security Testing & Remediation
Knowledge of Cloud Security Management
Knowledge of Data Privacy & Protection (DPP, GDPR)
Knowledge of AI-enabled cybersecurity operations platforms, automated threat detection techniques, and AI-assisted security analytics capabilities
Understanding of AI security risks, responsible AI governance principles, and the operational implications of AI-enabled technologies within cybersecurity environments
Experience in cybersecurity operations and application security
Experience in Technical Writing and Documentation Development
Experience with SCA/SAST/DAST/MAST/API Security
Experience in network security, including firewalls, VPNs, and network segmentation
Experience with vulnerability scanning tools such as Nessus, Qualys, and Rapid7 and remediation processes
Experience with penetration testing tools such as Burp Suite, Wireshark, Metasploit, and SQLmap
Experience with incident response, forensic analysis, malware analysis, and threat hunting
Experience securing cloud environments such as AWS, Azure, and Google Cloud
Experience with PCI-DSS, ISO 27001, NIST, and related regulatory standards
Experience in Business Continuity Planning and Disaster Recovery
Employment eligibility to work with American Express in the United States is required; visa sponsorship is not provided
At least one security-related certification preferred, such as GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GXPN, GREM, CEH, C|ASE .NET, C|ASE Java, OSCP, OSWA, OSWE, or CSSLP

Benefits

Comp & perks

Bonus
Benefits 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score